It executed blind command injection, exploiting server inputs to gain unauthorized system control.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

This IP belongs to Valero Energy.

This IP belongs to Verizon Communications.

It attempted to login to the Postfix server with an invalid password.

It attempted to perform a Chargen amplification attack on the SSH server.

It made multiple requests with the same X-Forwarded-For header.

The IP attempted to use the FTP server to distribute data recovery tools.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

This IP belongs to Caterpillar.

Damaging activities showing connections to rootkit attacks were associated with this IP.

This IP belongs to 3M.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

This IP has been observed spreading mobile malware, targeting our company application users.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

Repeated connections to the server from unknown or suspicious IP addresses.

Repeated failed attempts to access application interfaces or ports that are typically not open to the public.

POST /j_security_check: May indicate an attempt to bypass Java server page (JSP) login mechanisms.

It attempted to perform a Sentinels amplification attack on the SSH server.

This IP belongs to PepsiCo.

The IP was linked to numerous attacks using web shells through web servers.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

It made multiple requests with the same X-Csrf-Token header.

It attempted to take advantage of misconfigurations in the Apache server.