Bogus pop-ups irritating our end-users were found to be released by this infamous IP.

GET /../htpasswd: Trying to access password files using directory traversal.

The malicious IP attempted to gain unauthorized access to the server by repeatedly trying different username and password combinations.

This IP belongs to DuPont de Nemours.

The IP attempted a Rootkit installation to gain root access and control server activity.

Unusually high number of requests to a specific service or application within the server.

This IP was detected initiating zero-day exploit attacks on our system.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

Unusual patterns in user agent strings.

This IP has been flagged for attempting to escalate privileges in our network.

This IP was caught distributing malicious APK files.

The IP made multiple requests with the same Warning header.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

The IP attempted to use the FTP server to distribute DDoS attack tools.

This IP belongs to Shaw Communications.

This IP belongs to Marathon Petroleum.

This IP belongs to Chevron.

This IP belongs to Ford Motor.

It attempted to perform a RIPv1 amplification attack on the SSH server.

The IP has been implicated in multiple cases of URL manipulation attempts.

This IP belongs to McKesson.

This IP belongs to MTS (Mobile TeleSystems).

It attempted to perform a SIP Register Flood on the SIP server.

The IP sought to exploit the SSH-1 CRC32 vulnerability for expansive unauthorized access.

It sent Asterisk requests to non-existent extensions.