This IP was responsible for circulating malicious images masked with spyware.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.

POST /user/password?name[0,%20bypass]=dav&name[0]=loup&pass-reset-token-1=D&form_id=user_pass: Drupalgeddon2 exploit which allows remote code execution.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

It persistently tried to exploit weaknesses in the SSH communication encryption.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

It attempted to perform WSDL Enumeration attacks on the Apache server.

This IP belongs to Facebook.

Multi-step Attacks: Finding HTTP requests that only make sense if earlier requests succeeded or prepared the way.

This IP belongs to Abbott Laboratories.

SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

The IP attempted to perform a key exchange attack on the SSH server.

This IP belongs to United Continental Holdings.

Participated in a botnet attack to overwhelm our server’s resources.

This IP address from an unusual location has successfully installed malware on our servers.

The specific IP has been identified attempting to load malicious browser helper objects into the network.

Unexpected changes in the server configuration or installed software.

Multiple requests with the same Warning header.

There were several attempts from this IP to manipulate our server DNS records.

This IP belongs to Tech Data.

Our data revealed this IP distributing malicious powershell scripts.

This IP has participated in spreading adware-laden toolbar plugins, turning our workstations into advertising platforms.

The IP was involved in distributing malware, infecting systems or networks to steal data, cause damage, or gain unauthorized access.