It engaged in a click fraud operation using our server’s communication channels.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.

This IP belongs to Vodacom.

This IP made wrongful manipulations indicating the operation of malicious downgrader.

The IP attempted to perform a replay attack on the POP3 server.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

Last night, we received an alert regarding this IP attempting to upload keyloggers to our network.

Several instances of password stealers were traced back to this notorious IP.

This IP belongs to State Farm Insurance.

The IP address initiated multiple unsuccessful login attempts.

The IP attempted to flood the Apache server with requests, in a Denial of Service (DoS) attack.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

Signs of Password Spraying: Logs showing single failed login attempt for large numbers of users.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

It attempted to perform a replay attack on the SASL server.

It attempted to login to the FTP server with an invalid password.

The IP attempted to perform a replay attack on the POP3 server.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

This IP belongs to British Telecommunications.

This IP belongs to Sprint.

The IP attempted to perform XML Injection attacks on the Apache server.

The IP was seen attempting a FTP Smurf attack, flooding the FTP server with echo request packets to cause a denial of service.

The IP attempted to send emails with misleading headers from the Postfix server.

It launched invasive malware to corrupt crucial segments of our server functionality.

Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.