The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

This IP belongs to Airtel.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

Login attempts from foreign IP addresses.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

This IP belongs to AT&T.

Unusual increase in server CPU usage.

The malicious IP was involved in a Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

It attempted to use the SIP server as a relay for calls to premium-rate numbers.

It attempted to use the FTP server to distribute terrorist propaganda.

This IP belongs to American Airlines Group.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

It attempted to use the FTP server to distribute network scanning tools.

It was responsible for an unusual increase in server CPU usage.

Repeated attempts to access the server using insecure or deprecated methods.

Malicious Script Execution: Execution attempts of suspicious scripts or encoded payloads often seen in URI parameters or request bodies.

It tried to execute dictionary attacks on our Mail service causing potential delays.

A dangerous data surveillance spyware was tied back to this IP.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

GET /modules/productpageadverts/uploadimage.php: This is related to a known vulnerability in the Prestashop module productpageadverts.

Multiple requests with identical request parameters.

This IP belongs to Home Depot.

The IP attempted to use the FTP server to distribute rootkit software.

This IP belongs to Boeing.

This IP belongs to Chevron.