GET /CFIDE/administrator/enter.cfm: An attempt to get into the ColdFusion admin console.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

This IP has been linked to numerous occurrences of spyware distribution within our networks.

The IP was involved in an Email Spoofing attack, sending emails with a forged sender address, often used in phishing and spam campaigns.

It attempted to perform a Sentinels amplification attack on the SSH server.

It attempted to use the SIP server to perform a reflection DDoS attack.

We traced a significant increase in the distribution of malicious fake security software to the reported IP.

Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

The IP was flagged for attempting dictionary attacks on our user accounts.

High Frequency POST Requests: Numerous or unusual POST requests in a short time span could indicate a dictionary or brute force attack on a login page.

This IP belongs to Lowe's.

This IP belongs to Kroger.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

This IP belongs to TJX.

It actively sought to exploit unpatched software within our server applications.

Excessive traffic from a single IP address.

It carried out key logging attempts, hoping to record keyboard inputs during SSH sessions.

It attempted to perform a Steam protocol amplification attack on the SSH server.

The IP attempted to perform a credential stuffing attack on the IMAP server.

Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.

This IP belongs to 3M.

It sent Asterisk requests to non-existent extensions.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.