The IP attempted to execute an intruder software, terrifying users with unwanted content.

GET /admin: Looking for an unprotected admin page.

Several cross-site scripting attacks were traced back to this IP.

GET /configuration.php.old: Trying to locate backup configuration files.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

The IP attempted to use the FTP server to distribute network mapping tools.

It attempted to use the FTP server to distribute phishing emails.

The malicious IP was spotted attempting to brute-force the SSH login credentials.

This IP belongs to Berkshire Hathaway.

Multiple requests with the same Proxy-Authorization header.

This malicious IP was involved in a Clickjacking attack, tricking users into clicking on something different from what the user perceives, potentially leading to confidential information disclosure or takeover of their computer.

It showed an unusually high number of requests to the login page.

Multiple requests with the same Origin header.

It attempted to use a TearDrop attack to corrupt data packets being sent to our server.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

This IP belongs to Comcast.

The IP attempted to send emails from the Mail server that violate the server's terms of service.

The IP launched exploitation attacks based on the infamous 'Heartbleed' OpenSSL cryptographic vulnerabilities.

This IP belongs to Amazon Web Services.

This IP address from an unusual location has successfully installed malware on our servers.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

This IP belongs to Marathon Petroleum.

The IP was seen attempting a FTP Command Injection attack, inserting malicious commands into legitimate FTP requests.

Multiple requests with the same X-Wap-Profile header.

The IP attempted to perform Directory Traversal attacks on the Apache server.