GET /administrator.php: Attempting to access an admin interface.

It attempted to change file permissions on the FTP server.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

The IP attempted to perform a phishing attack using the SASL server.

It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

This IP belongs to McKesson.

It attempted to use the FTP server to distribute terrorist propaganda.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

The malicious IP was involved in a SQL Injection attack, attempting to manipulate a database for unauthorized access or data theft.

It initiated SSL-Stripping attacks, aiming to downgrade secure HTTPS connections to less-secure HTTP.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

It attempted to perform a man-in-the-middle attack on the POP3 server.

This IP belongs to Liberty Mutual Insurance Group.

It attempted to perform a Steam protocol amplification attack on the SSH server.

Repeated failed attempts to perform actions that require higher privileges.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.

The malicious IP attempted to gain unauthorized access to the server by repeatedly trying different username and password combinations.

This malicious IP was reported for attempting a Smurf attack, flooding a target system via spoofed broadcast ping messages.

Unusually high number of requests to the login page.

This malicious IP was reported for attempting to execute a Cross-Site Request Forgery (CSRF) attack, tricking a victim into executing unwanted actions on the FTP server.

This IP made wrongful manipulations indicating the operation of malicious downgrader.

This IP belongs to Allstate.