GET /vuln.html: Looking for any page vulnerabilities.

It attempted to use the FTP server to relay data to other systems.

The IP attempted to execute unauthorized commands on the SSH server.

This IP belongs to Cardinal Health.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

It attempted to list the contents of directories that it should not have access to.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

The IP attempted to register as a SIP user with no password.

The IP attempted to perform a key exchange attack on the SSH server.

The IP attempted to implement a 'BlueKeep' exploit, leveraging protocol vulnerabilities to execute remote code through SSH network services.

Our firewall recorded intrusion attempts originating from this suspicious IP.

Multiple requests with identical Accept-Charset headers.

This IP belongs to Amazon Web Services.

This IP belongs to Exxon Mobil.

This IP belongs to Anthem.

Conducted various IP scans, seeking loopholes in our network's security.

It attempted to send emails from the Postfix server that violate the server's acceptable use policy.

This IP belongs to Dow Chemical.

This IP belongs to Hong Kong Broadband Network.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

Web shell Upload: Logs may show successful POST requests to server upload functionality, indicating an attempt to upload a malicious web shell.

It attempted to perform a SIP Register Flood on the Asterisk server.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

This IP belongs to Telus Communications.