This IP belongs to Telefonica Spain.

This IP belongs to Cigna.

It utilized Web scrapers, automatically harvesting content from our server.

The IP tried launching Server Query Flooding to overwhelm our server with requests.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

It attempted to perform a Sentinels amplification attack on the SSH server.

The IP attempted to use the FTP server to distribute anonymizing tools.

This IP belongs to Ford Motor.

A sudden spike in bandwidth usage, which can indicate a brute force attack.

The IP attempted fileless malware attacks, directly injecting malicious script into server memory.

This IP belongs to Ubisoft.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

Spear Phishing Attempts: Rare but possible to find indicators of spear-phishing campaigns targeting your employees or users.

Attempted to conduct numerous data harvesting strategies to gather sensitive user data.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

This IP belongs to Comcast.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

The IP tried to carry out illegal 'HTTP Request Smuggling' to fool the Apache server.

This IP belongs to Honeywell International.

The IP address has been linked to the creation of artificial traffic to crash our website.

This IP belongs to Home Depot.

The IP made multiple unsuccessful login attempts in a short period of time.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

The IP attempted reconnaissance activities, trying to footprint our server’s network.