POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

The IP attempted to exploit known vulnerabilities in the Asterisk protocol.

Multiple requests with the same TE (Transfer Encoding) header.

It attempted to make unauthorized calls using the Asterisk server.

It attempted to perform a password spraying attack on the IMAP server.

Unusual Cookie Data: Logs show modified cookie data, usually encrypted or base64 encoded, suggestive of a session stealing or poisoning attack.

This IP was associated with targeted spear phishing attempts against our senior staff.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

Distributed session hijackers from the IP were designed to capture and exploit web browser sessions.

GET /backup.sql: Attempting to access a backup of your database.

This IP belongs to United Technologies.

It attempted to perform IP Spoofing attacks on the Apache server.

This IP belongs to Verizon.

This IP belongs to TELUS Communications.

This IP belongs to Anthem.

The IP made multiple requests to the password reset page.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

The IP attempted to perform a replay attack on the IMAP server.

This particular IP displayed behaviour typical of a ransomware-infected system, encrypting several files.

Unidentified password attempts and login activity were noticed from the specific IP address.

This IP belongs to JPMorgan Chase.

GET /backup.sql: Attempting to access a backup of your database.

The IP made multiple requests with identical Accept-Encoding headers.

This IP belongs to Sprint.

The IP was seen attempting a FTP Smurf attack, flooding the FTP server with echo request packets to cause a denial of service.