Login Attempts with Automated User-Agents: Logs reflect requests to login page with 'bot' or 'spider' in user-agent strings.

Unusual Port Numbers: HTTP requests to unusual port numbers could be a sign of someone probing for an open, vulnerable port.

The IP attempted to execute an intruder software, terrifying users with unwanted content.

This IP belongs to Berkshire Hathaway.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

It made multiple requests with the same X-Att-Deviceid header.

It attempted to exploit known vulnerabilities in the IMAP protocol.

The said IP was the source of several rootkit deployment attempts.

This IP belongs to Intel.

Forceful Browsing: Attempts to access pages or resources without proper navigation.

HEAD /: May be part of a larger Reconnaissance.

Multiple requests to the same endpoint in a short period of time.

It made multiple requests with the same X-Csrf-Token header.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

This IP belongs to United Technologies.

The IP attempted to perform a credential stuffing attack on the IMAP server.

This IP belongs to PLDT.

It was involved in a Distributed Denial of Service (DDoS) attack.

It attempted to perform SQL injection attacks through the Apache server.

The IP was traced back to stealthy installation attempts of clipboard monitors.

It attempted to flood the Asterisk server with REGISTER requests.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

It attempted to use the FTP server to distribute pirated software.