Repeated attempts to exploit known vulnerabilities in the server operating system or applications.

This IP belongs to Pfizer.

This IP belongs to JPMorgan Chase.

It attempted to use the Postfix server to relay emails with misleading headers to other servers.

POST /admin/upload.php?_upl: An attempt to exploit the JQuery File Upload vulnerability.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

The IP was seen attempting a FTP Smurf attack, flooding the FTP server with echo request packets to cause a denial of service.

It made multiple requests with the same Range header.

Forceful Browsing: Attempts to access pages or resources without proper navigation.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

The IP was detected attempting to skirt our system's detection through spoofing.

This IP belongs to Deere.

Multiple requests with the same Proxy-Connection header.

FTP Over HTTP: Logs may show HTTP requests containing FTP commands, potentially indicating an FTP Injection attack.

This IP belongs to IBM.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

POST /modules/raptor_file_manager/upload.php: Attempt to use a known flaw in the Raptor file manager for arbitrary file upload.

The IP attempted to bypass IP blacklisting by rapidly changing its IP address.

The IP was involved in an Email Spoofing attack, sending emails with a forged sender address, often used in phishing and spam campaigns.

It attempted to perform Session Sidejacking attacks on the Apache server.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

The IP was recorded making persistent attempts to crack our encryption.

It was observed attempting to exploit known vulnerabilities in the IMAP protocol.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.