The IP tried launching Server Query Flooding to overwhelm our server with requests.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

This malicious IP was seen sending unusually high volumes of requests, a sign of potential automated bot activity.

GET /solr/admin/cores?wt=json: Trying to exploit Apache Solr servers which have the runExecutableListener enabled.

The IP was detected attempting to skirt our system's detection through spoofing.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

This malicious IP was reported for attempting to perform a FTP Port Stealing attack, hijacking the data connection of an existing FTP session.

It started header injection or email injection attempts, by adding extra data into the headers and confusing the server processes.

Unusual patterns in referrer URLs.

This IP belongs to MetLife.

The IP address attempted to login to the FTP server with an invalid username.

This IP belongs to Cigna.

The IP attempted to perform Directory Traversal attacks on the Apache server.

It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.

HEAD /: May be part of a larger Reconnaissance.

It attempted to perform a man-in-the-middle attack on the SSH server.

It attempted to use the FTP server to distribute terrorist propaganda.

This IP was reported for attempting a Man-in-the-Middle attack, intercepting and potentially altering communication between two parties.

Manipulated HTTP POST Request: Finding HTTP POST requests with adjusted content-length headers to bypass firewall rules.

Repeated attempts to access rarely used or hidden services on the server.

The malicious IP was reported for attempting unauthorized logins to the SIP server, potentially to gain control over voice communication.

It attempted to perform Race Condition attacks on the Apache server.

This IP directed malicious network traffic to our servers with the intent to crash them.

This IP belongs to Shopify.

The IP attempted a DLL injection attack, hoping to execute malicious code within our SSH processes.