The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

This IP belongs to PythonAnywhere.

The handler of this IP has been exploiting scumware to disrupt our users' browsing experience.

The IP attempted to register as a SIP user with no password.

Suspicious Http Referrer Field: HTTP requests with external referrer headers that usually originate from internal source.

This IP belongs to Valero Energy.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

The IP attempted to perform XML Injection attacks on the Apache server.

The reported IP was identified as a BadBot, engaging in harmful activities such as unauthorized web scraping and data mining.

The IP was marked attempting to use infamous 'Ramnit' malware to steal sensitive Apache server data.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

This IP belongs to Walgreens Boots Alliance.

The IP address attempted to exploit known vulnerabilities in server software.

The IP attempted to use the FTP server to distribute VPN tools.

It attempted to download sensitive files from the FTP server.

This IP belongs to Comcast.

The IP attempted to use the POP3 server to distribute malware.

It made multiple requests with identical Accept-Charset headers.

This particular IP attempted to exploit vulnerabilities in our web applications.

This IP belongs to Google Cloud Services.

The IP attempted to perform ARP Spoofing attacks on the Apache server.

It attempted to perform SQL injection attacks through the Apache server.

This IP was involved in a Remote File Inclusion (RFI) attack, exploiting a vulnerability to execute malicious scripts from a remote server.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

It made multiple requests with the same Range header.