It executed blind command injection, exploiting server inputs to gain unauthorized system control.

This IP belongs to Slack.

Unexpected changes in the server configuration or installed software.

The IP attempted to execute unauthorized commands on the SSH server.

An identity theft activity was linked back to this malicious IP.

This IP belongs to the United States Department of Defense.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

It attempted to use the FTP server to distribute botnet command and control software.

This IP belongs to Reliance Jio.

This IP belongs to Nike.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

This IP belongs to Cox Communications.

The IP was reported for hosting a phishing website, deceiving users into providing their sensitive personal or financial information.

This IP belongs to Best Buy.

It made multiple requests with the same Range header.

Repeated Unique 404 Errors: Logs revealing a steady stream of unique 404 errors could suggest a DDoS attack aiming to exhaust storage resources.

This IP belongs to Bank of America.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

This IP belongs to Netflix.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.