The IP attempted fileless malware attacks, directly injecting malicious script into server memory.

This IP belongs to General Electric.

It made multiple requests with identical cookies.

It attempted to exploit known vulnerabilities in the SASL protocol.

A series of active scareware campaigns was traced back to this IP address.

It attempted to perform Session Sidejacking attacks on the Apache server.

This IP belongs to State Farm Insurance.

It attempted to use the FTP server to distribute hacking tools.

The IP attempted to use the FTP server to distribute zero-day exploit tools.

The IP attempted to perform Symlink attacks on the Apache server.

Repeated attempts to access the server using old or outdated software versions, which might have known vulnerabilities.

This IP was detected distributing spyware-infected USB drives to our users.

This IP belongs to FedEx.

Unexpected changes in the server configuration or installed software.

This IP belongs to Travelers Cos.

Several instances of password stealers were traced back to this notorious IP.

Multiple unsuccessful attempts to escalate privileges or access root account.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

The IP was involved in distributing malware, infecting systems or networks to steal data, cause damage, or gain unauthorized access.

Our team traced back the IP responsible for multiple mobile device tracking software distributions.

It made multiple requests with the same X-Csrf-Token header.

The said IP was the source of several rootkit deployment attempts.

It attempted to send emails from the Mail server to a large number of recipients.

It made multiple requests with the same X-Requested-With header.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.