GET /modules/productpageadverts/uploadimage.php: This is related to a known vulnerability in the Prestashop module productpageadverts.

This IP belongs to CVS Health.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

This IP belongs to IBM Cloud Services.

This malicious IP was reported for trying to inject malicious scripts into the VoIP server, potentially to disrupt its operation or steal data.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

This IP belongs to Orange France Telecom.

It attempted to perform a dictionary attack on the SSH server.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

This IP belongs to Berkshire Hathaway.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

The IP attempted a Rootkit installation to gain root access and control server activity.

It attempted to perform a phishing attack using the IMAP server.

The IP attempted to use the POP3 server to distribute malware.

It attempted to make unauthorized calls using the Asterisk server.

It attempted to use the FTP server to store illegal content.

This IP belongs to Ziggo.

The IP address has been associated with unwanted browser toolbar installations.

It repeatedly attempted to run server-side injection attacks, trying to execute malicious code on our server.

GET /backup.sql: Attempting to access a backup of your database.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

This IP belongs to Lockheed Martin.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

The malicious IP tried to brute force its way into the SASL authentication process.