This IP belongs to CVS Health.

some unknown host has been hammering our ssh logs every night and its got me thinking maybe its time to change every damn password

This IP belongs to State Farm Insurance.

It attempted to use the FTP server to store illegal content.

shadyyy

sus logz poppin

It attempted to create new directories on the SSH server.

This IP belongs to Dell Technologies.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

This IP belongs to Proximus.

It attempted to perform a Sentinels amplification attack on the SSH server.

I’m an old timer not knowin half these tech tricks but tonight i peeked at my email headers and saw some shady hops tracin all over the globe. It felt like tiny gremlins were sneakin around in my inbox pokin and prodin with no good reason. I got no clue whos tuggin at these threads but im warnin you it aint normal.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

A series of unusual file transfers originated from this IP.

Attempts to access the server using stolen or leaked credentials.

shady loggin hapened

It attempted to use the FTP server to distribute identity theft tools.

Somethin smellin fishy

As a granny that barely can open an email i seen some weird hits on the control panel last nite. The logs had a bunch of strange requests that look like a sneaky robot messing around. I cant even read half the gibberish in the headers but it gave me the creeps. If this keeps on im gonna rope in my nephew to chase it away before it wrecks my little site.

Repeated failed attempts to perform actions that require higher privileges.

Executed numerous SQL injection attacks in an attempt to manipulate the server's databases.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

It attempted to delete files from the SSH server.

Logs borked