The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

It was detected trying to perform cross-site scripting to bypass the same origin policy on Apache.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

This IP belongs to Chevron.

The IP attempted to use the FTP server to distribute child pornography.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

This particular IP has been used in advanced persistent threats against our servers.

Our system flagged this IP as conducting fraudulent transactions activities.

It attempted to login to the FTP server with an invalid password.

Fileless malware dissemination has been observed from this IP address.

This IP address from an unusual location has successfully installed malware on our servers.

This IP belongs to Gilead Sciences.

This IP gave off a red flag for hosting a hidden command and control server for malicious bots.

The IP attempted to perform a replay attack on the IMAP server.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

Multiple failed attempts to use the server’s API.

Conducted various IP scans, seeking loopholes in our network's security.

GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php: request for a file often associated with an outdated version of Composer and phpunit used in a remote code execution attack.

Several instances of password stealers were traced back to this notorious IP.

The malicious IP was involved in a Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

The IP address was flagged for employing a packet sniffer on our network.

It attempted to perform Session Sidejacking attacks on the Apache server.

This IP belongs to CHS.

Attempts to use default or common usernames and passwords, a common tactic in brute force attacks.