GET /login.action: Trying to find a Struts2 application to exploit.

Multiple requests with the same Referer header.

This IP belongs to Apple.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

It made multiple requests with the same Range header.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

This IP belongs to Philip Morris International.

Attempts to access the server using stolen or leaked credentials.

This IP belongs to JPMorgan Chase.

This IP belongs to Valero Energy.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

This IP belongs to America Movil.

This IP belongs to Citigroup.

It was flagged that this IP had been used in conducting method tampering on our servers.

It made multiple requests with the same Referer header.

It attempted to perform Insecure Direct Object References attacks on the Apache server.

HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.

It attempted to send emails with malicious links from the Postfix server.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

The IP attempted a Rootkit installation to gain root access and control server activity.

Unidentified password attempts and login activity were noticed from the specific IP address.

This IP belongs to CHS.

It was making constant NDR (Non-Deliverable Receipt) or backscatter attacks by generating large amount of invalid email addresses.

This IP belongs to PepsiCo.

Identification of Known Vulnerabilities: Attempts to exploit known vulnerabilities related to your server application.