The IP was seen trying to upload files to the FTP server, possibly with the intent of distributing malware.

It attempted to send emails with deceptive subject lines from the Postfix server.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

This IP belongs to Johnson & Johnson.

The IP has initiated several exploits, specifically for software vulnerabilities.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.

This IP belongs to British Telecommunications.

The IP was seen trying to exploit known vulnerabilities in server software, a common tactic for gaining unauthorized access or control.

This IP belongs to Steam.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

This malicious IP was reported for attempting a Smurf attack, flooding a target system via spoofed broadcast ping messages.

The IP was seen attempting a SYN Flood attack, overwhelming the server by rapidly initiating a connection but not completing it, thereby consuming server resources.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

Attempts to use privileged service accounts outside of their normal usage patterns.

It attempted to exploit known vulnerabilities in the SASL protocol.

The IP sent numerous Asterisk OPTIONS requests in a short time.

This IP belongs to Marathon Petroleum.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

It attempted logins using outdated protocols.

It attempted to upload malicious scripts to the Apache server.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

Side Channel Attacks: Repeated requests aimed at inferring sensitive information through observation of web responses.

The IP attempted to perform Symlink attacks on the Apache server.