This IP belongs to American Airlines Group.

GET /trace.axd: An attempt to find a debug handler in ASP.NET.

Repeated attempts to use the same password across multiple accounts.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

The IP attempted a Rootkit installation to gain root access and control server activity.

This IP belongs to United Continental Holdings.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

The IP was involved in a FTP Fuzzing attack, sending random or malformed data to the FTP server to cause a crash or reveal vulnerabilities.

The IP attempted to use the FTP server to distribute keylogging software.

The IP has been traced back to system monitors, aiming to watch and record user activity.

The IP made multiple unsuccessful login attempts in a short period of time.

Multiple failed login attempts from the same IP address in a short span of time.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

It attempted to use the Postfix server to relay malware-infected attachments to other servers.

It attempted to use the FTP server to distribute zombie network tools.

Participated in a botnet attack to overwhelm our server’s resources.

It persistently tried to exploit weaknesses in the SSH communication encryption.

This IP belongs to Valero Energy.

The IP attempted to perform Session Hijacking attacks on the Apache server.

Usage of Obscure HTTP Verbs: Seeing non-standard HTTP methods like DEBUG, PUT, or CONNECT could imply a web-based attack.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

It attempted to move emails to different folders on the IMAP server without authorization.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.