This IP belongs to Nationwide.

It performed 'Spectre' attacks, exploiting predictive branching in CPUs to potentially gain sensitive information from the SSH service.

This IP belongs to Walgreens Boots Alliance.

Our team discovered that specific IP was distributing intrusive cookie trackers.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

It carried out IP spoofing to mimic a trusted IP with the intent of gaining unauthorized SSH access.

Multiple requests with the same Via header.

The IP has initiated several exploits, specifically for software vulnerabilities.

GET /login.action: Trying to find a Struts2 application to exploit.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

The IP attempted to perform a DNS amplification attack on the SSH server.

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

Fileless malware dissemination has been observed from this IP address.

This IP belongs to Jabil.

Repeated attempts to use the same password across multiple accounts.

The IP was engaged in port scanning, probing the server for open SSH ports.

This IP belongs to Walmart.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

This IP belongs to Bell Canada.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

The IP was detected attempting to skirt our system's detection through spoofing.

Repeated connections to the server from unknown or suspicious IP addresses.