The IP was found trying to maliciously clone the SSH certificates for privileged access.

The IP attempted to perform XML Injection attacks on the Apache server.

The IP performed forceful browsing, to access and exploit unprotected files and directories.

The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

This IP belongs to Home Depot.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

It attempted to use the FTP server to distribute network scanning tools.

This IP belongs to Hong Kong Broadband Network.

It attempted to delete emails from the POP3 server without authorization.

This IP belongs to Telus Communications.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

The IP attempted to list the contents of directories that it should not have access to.

This IP belongs to American Airlines Group.

This IP belongs to Walgreens Boots Alliance.

Our team traced back the IP responsible for multiple mobile device tracking software distributions.

It was detected trying to perform cross-site scripting to bypass the same origin policy on Apache.

This particular IP has been used in advanced persistent threats against our servers.

The IP launched HTTP tunnel attacks, attempting to wrap other protocols in HTTP to bypass network filters.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

This IP belongs to Airtel.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.