Repeated attempts to access the server using insecure or deprecated methods.

This IP belongs to Walgreens Boots Alliance.

The IP attempted to use the FTP server to distribute rootkit software.

Uncommon Referer Header: HTTP logs record requests from an uncommon or suspicious 'Referer' header.

The IP attempted to use the FTP server to distribute network mapping tools.

GET /db/finance.dump: An attempt to access a database dump file.

It attempted to upload malicious files to the SSH server.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

This IP belongs to CHS.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

This IP belongs to Charter Communications.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

It attempted to download sensitive files from the FTP server.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

This IP belongs to Oracle.

This IP belongs to Sky Broadband.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

This IP belongs to Comcast.

The malicious IP was involved in a SQL Injection attack, attempting to manipulate a database for unauthorized access or data theft.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

The IP attempted to send spam emails from the Postfix server.

The IP attempted a race condition attack, aiming to execute unwanted sequences in the server.

Multiple requests to the same endpoint in a short period of time.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.