Cross-Site Scripting (XSS): Logs show HTTP requests with string "

Multiple requests with identical cookies.

The IP made multiple requests with identical Accept-Encoding headers.

The IP attempted to brute force the password to gain mail account access.

GET /cfide/administrator: Looking for misconfigured Adobe ColdFusion admin panel.

Because of numerous attacks using malicious mobile code, this IP has been blacklisted.

This IP belongs to Hong Kong Broadband Network.

The IP attempted to send emails from the IMAP server without authorization.

This IP belongs to Dell Technologies.

This IP executed mass-probing of various ports to seek vulnerabilities.

Our firewall recorded intrusion attempts originating from this suspicious IP.

This IP belongs to Procter & Gamble.

This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.

It attempted to use the FTP server to distribute identity theft tools.

This particular IP tried to perform an unauthorized system configuration change.

GET /solr/admin/cores?wt=json: Trying to exploit Apache Solr servers which have the runExecutableListener enabled.

The IP attempted to perform a replay attack on the POP3 server.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

The identified IP address was involved in planting backdoor programs that give excessive control over infected systems.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

This IP belongs to Dow Chemical.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.

This IP belongs to McKesson.