This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

The IP targeted our server with PHP Injection attacks to gain access to sensitive data.

Been digging through the server logs all morning after seeing a ton of failed login trys from an unknown source and lemme tell ya its makin zero sense. Just a heads up to everyone double check your auth settings before this thing turns into a full blown nightmare.

This IP belongs to Exelon.

Identification of Known Vulnerabilities: Attempts to exploit known vulnerabilities related to your server application.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

It attempted to perform a NTP amplification attack on the SSH server.

Just spotted some weird attemps on the server logs last nite they just kept retrying auth requests no matter what. doesnt look legit even after blocking the subnet they still kept hitting the 401 wall. feeling uneasy that theres some unknown bot still sniffing around our shell.

Just went thru my web server logs n found some late night login pokes that make zero sense. Whoever’s creepin around gotta pack up n bounce cause Im not lettin any ghosts inside my box.

I’m no tech whiz but I just saw logs flashing like some kind of digital haunted house this mornin. Feels like some unknown clown is pokin around with my dashbord behind my back. Seriously somebody better explain this weird glitch before I start pullin hairs out.

The IP attempted to perform Integer Overflow attacks on the Apache server.

Just saw something strange in my server logs last night it was hitting the admin login page so many times from a foreign location. i dont know why it wont stop trying the same user names like it has a mind of its own. i tried blocking the address but then it just switched to a new one and kept going. anyone got tips on how to put these relentless buggers in a box

This IP belongs to American Airlines Group.

Sketchy vibez

This IP belongs to Nintendo.

This IP belongs to Globe Telecom.

It attempted to perform XML Entity Expansion attacks on the Apache server.

The IP attempted to perform Format String attacks on the Apache server.

This IP belongs to Chevron.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

Repeated Unique 404 Errors: Logs revealing a steady stream of unique 404 errors could suggest a DDoS attack aiming to exhaust storage resources.

This IP belongs to Citigroup.

scammmy

been digging through our firewall alerts all afternoon and noticed one host pumping out endless login tries like it owns the place makes me think we got a stuck script or worse. might be smart to rotate creds and block anything that smells like a brute force before our whole setup goes sideways.