It engaged in a click fraud operation using our server’s communication channels.

This IP belongs to Twenty-First Century Fox.

This IP was implicated in attempts to inject ransomware into our systems.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

It attempted to perform a Steam protocol amplification attack on the SSH server.

This IP belongs to Walmart.

It attempted to perform Insecure Direct Object References attacks on the Apache server.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.

The IP address attempted to register as a SIP user with an invalid username.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

The IP attempted to perform Session Fixation attacks on the Apache server.

This IP belongs to British Telecommunications.

The IP was traced back to stealthy installation attempts of clipboard monitors.

The IP attempted to bypass the SASL server's authentication mechanism.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

Repeated attempts to alter or delete log files to cover tracks.

It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

This IP was associated with targeted spear phishing attempts against our senior staff.

The IP was noticed spreading RATs (remote administration tools) camouflaged as regular software.

HEAD /: May be part of a larger Reconnaissance.

The IP has been caught trying to deliver spyware into our system to compromise sensitive data.

This IP belongs to Verizon.

It executed blind command injection, exploiting server inputs to gain unauthorized system control.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.