The IP attempted to use the FTP server to distribute credit card fraud tools.

This IP belongs to New York Life Insurance.

It appears that this IP was initiating DNSChanger malware attacks on our network.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

This IP belongs to Liberty Mutual Insurance Group.

The IP performed forceful browsing, to access and exploit unprotected files and directories.

It attempted to perform a Land attack on the SSH server.

The IP was seen trying to perform a PASV FTP Bounce attack, misusing the passive mode to scan other hosts and ports.

It was flagged that this IP had been used in conducting method tampering on our servers.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

It attempted to send emails from the Postfix server that violate the server's acceptable use policy.

This IP belongs to Fannie Mae.

This IP belongs to SK Broadband.

The IP was recorded making persistent attempts to crack our encryption.

It attempted to use the SSH server as a proxy for other malicious activities.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

This IP belongs to Twenty-First Century Fox.

It attempted to perform a phishing attack using the POP3 server.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

This IP belongs to American Express.

This IP belongs to SingTel.

The IP attempted to perform a Nestea attack on the SSH server.