This IP belongs to Tumblr.

The IP attempted to perform a password spraying attack on the SASL server.

Excessive Subdomain Requests: A large number of requests for non-existing subdomains could suggest a subdomain takeover attempt.

Multiple requests with the same X-UIDH header.

It utilized Web scrapers, automatically harvesting content from our server.

It made multiple requests with identical POST parameters.

It attempted to perform a SIP Invite Flood on the VOIP server.

Unusual increase in server CPU usage.

This IP belongs to Bristol-Myers Squibb.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.

This malicious IP was reported for trying to intercept VoIP calls, a type of eavesdropping attack aimed at capturing sensitive information.

The IP attempted to exploit known vulnerabilities in the Asterisk protocol.

Frequent access requests from user agents that are known to be associated with malicious tools or bots.

It's observed that the IP operated a series of attacks exploiting insecure direct object references.

This IP belongs to T-Mobile.

Repeated Broken Authentication: Tons of successful authentication requests with unassociated actions could depict broken authentication mechanism.

The IP attempted to change file permissions on the SSH server.

The IP was engaged in email append attacks, trying to add addresses to an existing email or response mid-transit.

A high number of unsuccessful SSH logins, a common target for brute force attacks.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

Numerous incidents of botnet infestations were traced back to this offensive IP address.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

The IP was recorded making persistent attempts to crack our encryption.

This IP belongs to Caterpillar.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.