The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

This IP belongs to Tech Data.

A sudden increase in the number of new user accounts, which can indicate an attacker has gained access and is creating backdoor accounts.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

GET /index.php?param=: Attempting a cross-site scripting (XSS) attack.

This malicious IP was reported for attempting to perform a FTP Port Stealing attack, hijacking the data connection of an existing FTP session.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

This IP belongs to MTS (Mobile TeleSystems).

The IP was the origin of numerous webcam loggers, a serious privacy invasion.

Remote Execution Attempts: Logs showing unusual terminal commands or scripts run through web access.

This IP belongs to Time Warner Cable Internet.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

Signal of DDoS Attacks: Multiple IP addresses sending a significantly high volume of traffic.

Multiple requests with the same DNT (Do Not Track) header.

Unusual command line activities that are not typical for the server environment.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

This IP belongs to General Motors.

The IP attempted to exploit known vulnerabilities in the Asterisk protocol.

The IP was identified as operating a Registration Bot (REG-Bot), automating the creation of multiple fake accounts on various platforms.

This IP belongs to Citigroup.

This IP belongs to General Motors.

It attempted to execute unauthorized commands on the Apache server.