This IP belongs to Kraft Heinz.

GET //web-console/Invoker: Might be an attempt to access JBoss server's web console for exploitation.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

This IP belongs to PepsiCo.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

It appeared to be taking part in SSL Stripping attacks, downgrading secure HTTPS connections to facilitate eavesdropping.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

It attempted to perform a RIPv1 amplification attack on the SSH server.

The IP was found to be behind numerous fileless malware attacks.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

The IP made multiple requests with the same If-Match header.

The IP initiated clickjacking exploits, causing users to unwittingly perform malicious actions during SSH sessions.

This IP belongs to Dell Technologies.

Multiple requests with the same X-Requested-With header.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

This IP belongs to Valero Energy.

This IP belongs to General Motors.

GET /../htpasswd: Trying to access password files using directory traversal.

It was flagged that this IP had been used in conducting method tampering on our servers.

Malformed Host Headers: HTTP requests with host headers that do not match the site's actual hostname.

The IP was seen trying to perform a PASV FTP Bounce attack, misusing the passive mode to scan other hosts and ports.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

This IP belongs to Home Depot.

This IP belongs to China Mobile.