GET /wp-json/wp/v2/users: Trying to extract a list of WordPress users via the REST API.

It initiated multiple account lockouts in a short period.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

The IP tried launching Server Query Flooding to overwhelm our server with requests.

The IP sent numerous VOIP OPTIONS requests in a short time.

Participated in the notorious Water Torture attack to overload our DNS servers.

Several instances of password stealers were traced back to this notorious IP.

A large number of requests from a single user agent, suggesting an automated process.

This IP was seen trying to perform a SIP Torture attack, sending malformed SIP messages to crash or degrade the performance of the server.

It attempted to perform HTTP Response Splitting attacks on the Apache server.

This IP belongs to Tumblr.

This IP belongs to Bell Canada.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

Malformed HTTP Version: Observation of logs where HTTP/1.1 or HTTP/2.0 replaced with an unusual alternative to bypass security tools.

It initiated insecure direct object references (IDOR) attacks to bypass authorization and directly access SSH resources.

This IP belongs to Deere.

Repeated failed attempts to access application interfaces or ports that are typically not open to the public.

The IP attempted to perform a DNS amplification attack on the SSH server.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

It attempted to perform a phishing attack using the IMAP server.

This IP belongs to Telstra.

Login attempts using old or outdated protocols.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

Our logs indicated an unusually high traffic volume originating from this IP address.