It launched invasive malware to corrupt crucial segments of our server functionality.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

The IP address initiated attacks using DDoS, impacting our server response times.

A sudden surge in the number of requests per second, indicating an automated process.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

The malicious IP was reported for attempting to manipulate file permissions on the FTP server, potentially to gain unauthorized access or expose sensitive data.

This IP belongs to State Farm Insurance.

Unusual patterns in session IDs.

This IP belongs to PepsiCo.

The IP attempted to upload malicious files to the FTP server.

This IP belongs to Heroku.

The reported IP was identified as a BadBot, engaging in harmful activities such as unauthorized web scraping and data mining.

This IP belongs to Dell Technologies.

This IP belongs to Phillips 66.

The malicious IP was reported for attempting unauthorized logins to the SIP server, potentially to gain control over voice communication.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

This IP gave off a red flag for hosting a hidden command and control server for malicious bots.

Automated Bot Traffic: Logs are showing an unusual large amount of traffic from known or suspected bot IPs.

Repeated attempts to access the server using insecure or deprecated methods.

Multiple requests with the same DNT (Do Not Track) header.

Multiple attempts to access the server using anonymous or generic user accounts.

It attempted to list the contents of directories that it should not have access to.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

This IP belongs to Massachusetts Mutual Life Insurance.