This IP belongs to IBM.

This IP belongs to Procter & Gamble.

Repeated attempts to upload or execute files, which can indicate an attempt to install malicious software.

This IP belongs to Bristol-Myers Squibb.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

This IP attempted to distribute malicious Javascript files.

A high number of unsuccessful SSH logins, a common target for brute force attacks.

Multiple requests with identical request parameters.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

gang stalking

The IP address generated an unusual increase in network bandwidth usage.

This IP belongs to Comcast.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

There were several attempts from this IP to manipulate our server DNS records.

The IP made multiple requests with identical Accept-Encoding headers.

It attempted to perform a brute force attack on the POP3 server.

The IP made multiple requests with the same Origin header.

This IP belongs to Berkshire Hathaway.

This IP belongs to Intel.

Multiple attempts to access the server using anonymous or generic user accounts.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

GET /etc/passwd: An attempt to retrieve Linux server user account details.

The IP was involved in a SIP brute force attack, attempting to guess SIP authentication credentials to gain unauthorized access.

It sent SIP INVITE requests to non-existent extensions.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.