The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

This IP belongs to Walmart.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

The IP attempted to perform Directory Traversal attacks on the Apache server.

This IP belongs to Home Depot.

This IP has participated in spreading adware-laden toolbar plugins, turning our workstations into advertising platforms.

It attempted to perform a side channel attack on the SSH server.

The IP attempted to send emails from the Postfix server that violate the server's email sending limits.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

GET /admin: Looking for an unprotected admin page.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

The IP was seen performing a CSRF (Cross-site request forgery) attack to manipulate user actions.

This IP belongs to Zayo Bandwidth.

Multiple failed login attempts from the same IP address in a short span of time.

This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.

This IP belongs to Oracle.

It was flagged that this IP had been used in conducting method tampering on our servers.

This IP belongs to Slack.

It tried to create buffer overflows by sending large amounts of data at once to overwhelm server resources.

GET /solr/admin/cores?wt=json: Trying to exploit Apache Solr servers which have the runExecutableListener enabled.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

Multiple requests to the password reset page.

This IP belongs to United Technologies.

Attempts to access the server using credentials that have been involved in previous security incidents.