The malicious IP conducted HTTP verb tampering, exploiting varying responses to different HTTP methods.

Conducted various IP scans, seeking loopholes in our network's security.

The IP attempted to use the Mail server to relay phishing emails to other servers.

The IP attempted to brute force the password to gain mail account access.

This IP belongs to Walmart.

This IP belongs to ConocoPhillips.

The IP made multiple requests using uncommon HTTP methods.

It attempted to exploit known vulnerabilities in the POP3 protocol.

Unusual patterns in referrer URLs.

The IP attempted to inject malicious scripts into the server hoping it would get executed.

This IP belongs to Zayo Bandwidth.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

The IP attempted to use the POP3 server to distribute malware.

This IP belongs to FedEx.

It attempted to use the FTP server to distribute identity theft tools.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

The IP attempted to perform a SNMP amplification attack on the SSH server.

The malicious IP was seen trying to perform a Replay attack, capturing SIP authentication data and resending it to gain unauthorized access.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

Multiple failed attempts to use the server’s API.

The IP was identified as operating a Registration Bot (REG-Bot), automating the creation of multiple fake accounts on various platforms.

The IP exhibited unusual patterns in the Accept-Language header.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

Our system blocked an attempted Code Injection attack from this IP.