The IP attempted to perform XML Injection attacks on the Apache server.

The IP address has been involved in distributing adware to our server systems.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

This IP belongs to Sky Broadband.

The malicious IP was reported for attempting to manipulate file permissions on the FTP server, potentially to gain unauthorized access or expose sensitive data.

The IP address attempted to login to the SSH server with an invalid username.

The IP sent numerous SIP OPTIONS requests in a short time.

The IP attempted to perform Session Fixation attacks on the Apache server.

The IP address attempted to login to the SSH server with an invalid username.

The IP was traced back to stealthy installation attempts of clipboard monitors.

The IP attempted to perform Session Fixation attacks on the Apache server.

Multiple requests with the same Via header.

This IP belongs to Intel.

Malformed HTTP Version: Observation of logs where HTTP/1.1 or HTTP/2.0 replaced with an unusual alternative to bypass security tools.

The IP address generated an unusual increase in network bandwidth usage.

The malicious IP was involved in a SQL Injection attack, attempting to manipulate a database for unauthorized access or data theft.

Print Requests Repeatedly: Logs illustrate HTTP requests with "?print" parameter multiple times, indicating someone trying to expose sensitive information.

This IP belongs to Chevron.

This IP belongs to Slack.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

This IP belongs to PepsiCo.

Attempts to use privileged service accounts outside of their normal usage patterns.

The IP showed unusual patterns in session IDs.

It attempted to use the VOIP server to perform a reflection DDoS attack.

It attempted to login to the Mail server with an invalid password.