This IP belongs to Amazon Web Services.

Attempts to use automated scripts or tools for password cracking.

This malicious IP was reported for attempting to initiate a large number of simultaneous calls, a sign of a potential DDoS attack.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

This IP belongs to Airtel.

This IP belongs to MetLife.

This IP belongs to Twenty-First Century Fox.

GET /.git/config: Trying to access source code or repository configuration information.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

This IP belongs to UnitedHealth Group.

The malicious IP was reported for attempting to manipulate file permissions on the FTP server, potentially to gain unauthorized access or expose sensitive data.

It attempted to perform a SSDP amplification attack on the SSH server.

GET /errors.log: Shows an actor trying to access server error logs.

GET /vuln.html: Looking for any page vulnerabilities.

This IP belongs to Optus.

This IP was detected initiating zero-day exploit attacks on our system.

The IP attempted to perform HTTP Verb Tampering attacks on the Apache server.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

The IP attempted to send malware-infected attachments from the Mail server.

Content Sniffing: Logs reflect HTTP requests that include the Accept header with " / ", suggesting an attacker is trying to detect what types of content the server will send.

This IP belongs to BT Central Plus.

A multitude of spyware-infected download wrappers were linked to the spotted IP address.

It appears that this IP was initiating DNSChanger malware attacks on our network.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.