It attempted to perform Insecure Direct Object References attacks on the Apache server.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

This IP belongs to Citigroup.

We flagged down attempts from the IP to leak backdoor viruses into the system.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

The IP attempted to perform a brute force attack on the SSH server.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

It attempted to use the IMAP server to relay spam.

The IP attempted to perform Stack Overflow attacks on the Apache server.

The IP attempted to use the FTP server to distribute credit card fraud tools.

GET /internal/: Browsing an internal directory.

Unusual patterns in referrer URLs.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

This IP was reported for attempting a Man-in-the-Middle attack, intercepting and potentially altering communication between two parties.

This IP belongs to PepsiCo.

This IP belongs to Walmart.

Repeated attempts to upload or execute files, which can indicate an attempt to install malicious software.

The IP has been caught trying to deliver spyware into our system to compromise sensitive data.

This malicious IP was reported for trying to intercept VoIP calls, a type of eavesdropping attack aimed at capturing sensitive information.

Unusual system or application errors related to authentication or access controls.

This IP belongs to Virgin Media.

It attempted to perform a SIPVicious scan on the Asterisk server.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

GET /etc/passwd: An attempt to retrieve Linux server user account details.