HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.

This IP belongs to Travelers Cos.

The IP made repeated attempts to authenticate with the Asterisk server using different usernames.

The IP attempted logins at unusual times.

This IP belongs to Airtel.

The IP attempted to perform a Bonk attack on the SSH server.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

It attempted to perform a Sentinels amplification attack on the SSH server.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

GET /CFIDE/administrator/enter.cfm: An attempt to get into the ColdFusion admin console.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

It was found that the IP had deployed rogue security software in our system.

The IP attempted to execute unauthorized commands on the SSH server.

The IP attempted to use the FTP server as a proxy for other malicious activities.

This IP belongs to Nexon.

It attempted to perform a RIPv1 amplification attack on the SSH server.

Multiple requests with identical cookies.

Unusual Port Numbers: HTTP requests to unusual port numbers could be a sign of someone probing for an open, vulnerable port.

It attempted to send phishing emails from the Postfix server.

There were several attempts from this IP to manipulate our server DNS records.

It engaged in mail bombing, flooding the server with large amounts of insignificant mails.

It attempted to exploit known vulnerabilities in the SSH protocol.

The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.