GET /vuln.html: Looking for any page vulnerabilities.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

Conducted various IP scans, seeking loopholes in our network's security.

The IP initiated a 'Deauth' attack, knocking legitimate users off the Apache service.

Incidents of privacy-invasive software floating in our network were linked to this IP.

The IP set off alarms for an attempted man-in-the-middle attack on our servers.

Unexpected changes in the server configuration or installed software.

The IP performed regular system foot printing to gain intel on weak points in our server.

GET /db/finance.dump: An attempt to access a database dump file.

This IP belongs to MTN.

Headless Browser Activity: Logs may show HTTP requests with user-agent strings containing headless browser identifiers.

This IP belongs to the University of California, Berkeley.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

The IP was seen engaging in a Slowloris attack, holding as many connections to the target web server open for as long as possible, eventually overloading the server.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

It attempted to perform a Smurf attack on the SSH server.

An alarming frequency of microphone loggers has been traced back to this IP.

Multiple requests to the server's robots.txt file.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

The IP attempted to perform a brute force attack on the SSH server.

This IP belongs to Deere.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

The IP actively tried code replacement attacks, swapping legitimate system call addresses with malicious ones.

This IP belongs to Apple.