This IP belongs to Tyson Foods.

Identification of Known Vulnerabilities: Attempts to exploit known vulnerabilities related to your server application.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

It repeatedly attempted to run server-side injection attacks, trying to execute malicious code on our server.

This IP belongs to Bell Canada.

This IP belongs to America Movil.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

We flagged down attempts from the IP to leak backdoor viruses into the system.

We observed the IP distributing harmful document tracking tools.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

The IP engaged in DNS Spoofing, rerouting our server's lookups to a malicious destination.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

It made various efforts to insert spyware to monitor SSH communications covertly.

Multiple requests to the password reset page.

It attempted to perform Web Service attacks on the Apache server.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

This IP belongs to McKesson.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

It attempted to use the Postfix server to relay emails with malicious links to other servers.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

This IP belongs to China Mobile.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

We flagged down attempts from the IP to leak backdoor viruses into the system.

This IP was seen trying to perform a Sniffing attack, capturing and analyzing VoIP traffic to glean sensitive information.