Our system blocked an attempted Code Injection attack from this IP.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

This IP belongs to TELUS Communications.

This IP belongs to KT Corporation.

Unexpected HTTP Methods Usage: Frequent HTTP TRACE method attempts could be an attempt to intercept network requests.

This IP belongs to Amazon.

Fileless malware dissemination has been observed from this IP address.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

This IP belongs to New York Life Insurance.

This IP belongs to Apple.

This IP belongs to Johnson & Johnson.

GET /wp-json/wp/v2/users: Trying to extract a list of WordPress users via the REST API.

Unusually high number of requests to a specific service or application within the server.

This IP belongs to Nike.

It attempted to perform IP Spoofing attacks on the Apache server.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

This IP belongs to Procter & Gamble.

It seems like this IP tried to spread malware into the network.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

Multiple requests with identical POST parameters.

It attempted to perform HTTP Parameter Pollution attacks on the Apache server.

It attempted to exploit known vulnerabilities in the POP3 protocol.

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

POST /j_security_check: May indicate an attempt to bypass Java server page (JSP) login mechanisms.