Print Requests Repeatedly: Logs illustrate HTTP requests with "?print" parameter multiple times, indicating someone trying to expose sensitive information.

This IP belongs to NetEase.

This IP belongs to Abbott Laboratories.

The IP also engaged in website cloning, creating mirror websites to trick users into sharing sensitive data.

Fileless malware dissemination has been observed from this IP address.

The IP attempted to send emails from the Mail server that violate the server's terms of service.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

Several instances of password stealers were traced back to this notorious IP.

This IP belongs to Fannie Mae.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

The IP attempted to register with the Asterisk server using an invalid username.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

This IP belongs to TJX.

This IP belongs to Alibaba Cloud Services.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

The IP was involved in a war dialing attack, dialing a large number of phone numbers to find modems, fax machines, and unsecured VoIP devices.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

This IP belongs to Phillips 66.

It attempted to use the FTP server to distribute brute force tools.

It launched a SYN flood attack, aiming to consume server resources and disrupt services.

The IP attempted to use the FTP server as a proxy for other malicious activities.

The IP attempted the notorious Shellshock vulnerability, which could pose a severe threat to our server's resources.

It continually sought to exploit known vulnerabilities within SSH through crafted packet attempts.