Repeated attempts to use the same password across multiple accounts.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

GET /db/finance.dump: An attempt to access a database dump file.

The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.

Malicious Script Execution: Execution attempts of suspicious scripts or encoded payloads often seen in URI parameters or request bodies.

Repeated attempts to perform actions that are typically restricted, such as creating or modifying user accounts.

This IP belongs to United Technologies.

It attempted to upload malicious scripts to the Apache server.

Remote Execution Attempts: Logs showing unusual terminal commands or scripts run through web access.

This IP belongs to Home Depot.

The IP attempted to perform a SIPVicious scan on the VOIP server.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

This IP belongs to Cardinal Health.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

It attempted to perform a SIP Invite Flood on the VOIP server.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

Attempts to access the server using unusual HTTP methods or request types.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

This IP belongs to Heroku.

It repeatedly attempted to run server-side injection attacks, trying to execute malicious code on our server.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

This malicious IP was reported for attempting a FTP Bounce attack, exploiting the FTP protocol's proxy command to scan ports and networks.

This malicious IP was reported for attempting a Sniffing attack, capturing and analyzing FTP traffic to glean sensitive information.