It was noticed that the IP has tried illegal attempts of reverse engineering our software.

This particular IP has been used in advanced persistent threats against our servers.

This IP belongs to Shopify.

It attempted to perform a Land attack on the SSH server.

It made multiple requests with the same X-Forwarded-For header.

The IP was seen performing a CSRF (Cross-site request forgery) attack to manipulate user actions.

The delivery of spyware, aimed at gathering sensitive information, was originated from this IP.

Multiple account lockouts in a short period of time.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

It sent unusually large SIP packets, potentially indicating a buffer overflow attempt.

Multiple requests with the same Referer header.

Unusual patterns in referrer URLs.

It attempted to perform a Land attack on the SSH server.

This IP belongs to Valero Energy.

GET /.git/config: Trying to access source code or repository configuration information.

This IP belongs to Marathon Petroleum.

It attempted to exploit known vulnerabilities in the SSH protocol.

Directories Traversal Attempts: Logs showing HTTP requests that include ".." or "/.." might illustrate someone's effort to locate or exploit sensitive data.

It attempted to perform Unvalidated Redirects and Forwards attacks on the Apache server.

This malicious IP was reported for trying to inject malicious scripts into the VoIP server, potentially to disrupt its operation or steal data.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

Damaging activities showing connections to rootkit attacks were associated with this IP.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.