GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

This IP belongs to Johnson & Johnson.

POST /modules/raptor_file_manager/upload.php: Attempt to use a known flaw in the Raptor file manager for arbitrary file upload.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

The malicious IP was reported for attempting unauthorized logins to the SIP server, potentially to gain control over voice communication.

This IP belongs to PythonAnywhere.

Multiple requests with the same X-Forwarded-For header.

It performed botnet operations, controlling a group of “zombie” computers to amplify its DDoS attacks.

This IP belongs to Ubisoft.

The IP address attempted to login to the Mail server with an invalid username.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

Login Attempts with Automated User-Agents: Logs reflect requests to login page with 'bot' or 'spider' in user-agent strings.

The IP attempted to use the FTP server to distribute spam.

This IP belongs to Hostgator.

This IP belongs to Oracle.

This IP belongs to Canadian Department of Defense.

It was flagged that this IP had been used in conducting method tampering on our servers.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

This IP belongs to Virgin Media.

The IP attempted to perform a credential stuffing attack on the POP3 server.

The IP attempted to perform Directory Traversal attacks on the Apache server.

The IP attempted to use the FTP server to distribute data recovery tools.

SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

This IP belongs to Heroku.