It attempted to exploit known vulnerabilities in the FTP protocol.

This IP belongs to Baidu.

The IP performed regular system foot printing to gain intel on weak points in our server.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

This IP belongs to Caterpillar.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

The IP was actively seeking unpatched SSH software in hope of finding exploitable vulnerabilities.

The identified IP address was involved in planting backdoor programs that give excessive control over infected systems.

GET /cfide/administrator: Looking for misconfigured Adobe ColdFusion admin panel.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

It launched a privilege escalation attack aiming to gain unauthorized access with higher-level permissions.

Multiple requests with the same Expect header.

This IP belongs to World Fuel Services.

Excessive traffic from a single IP address.

Multiple login attempts from different geographical locations in a short period of time.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

The IP attempted to send emails from the Mail server pretending to be from a different sender.

This IP blocked legitimate users by performing IP hijacking.

The malicious IP conducted HTTP verb tampering, exploiting varying responses to different HTTP methods.

The IP attempted to use the POP3 server to distribute malware.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.

The IP made multiple requests with the same Proxy-Authorization header.

This IP belongs to Costco Wholesale.

It attempted to perform a side channel attack on the SSH server.