my neim is.amir ghafari sarvestani bank sepah:IR770150000000717300602404 07/03/1368 iran-shiraz 22800-6955-5 call.nomber:(+98)09963462416 send my mani:$0 ai.ia.ag.it..... aim pershian.no dialog english

The IP attempted the notorious Shellshock vulnerability, which could pose a severe threat to our server's resources.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

This IP belongs to Oracle Cloud Infrastructure.

GET /modules/productpageadverts/uploadimage.php: This is related to a known vulnerability in the Prestashop module productpageadverts.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

The malicious IP conducted HTTP verb tampering, exploiting varying responses to different HTTP methods.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

The IP address attempted to login to the SSH server with an invalid username.

This IP was found responsible for a session hijacking attempt on our network.

We flagged down attempts from the IP to leak backdoor viruses into the system.

This IP belongs to Nintendo.

It attempted to perform a side channel attack on the SSH server.

This IP belongs to Home Depot.

The IP attempted to perform Stack Overflow attacks on the Apache server.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.

GET /backup.sql: Attempting to access a backup of your database.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

This IP belongs to IBM.

Our team has linked several viruses dissemination activities to this IP.

This IP belongs to BT Central Plus.

This IP belongs to ConocoPhillips.

It attempted to flood the VOIP server with REGISTER requests.

GET /xampp/phpmyadmin/: A threat actor trying to access unprotected phpMySQL instances tied to XAMPP installations.

The IP was reported for attempting a Cross-Site Scripting attack, injecting malicious scripts into websites to steal data or disrupt functionality.