HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.

The IP was traced back to stealthy installation attempts of clipboard monitors.

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

The IP attempted to register with the VOIP server using an invalid username.

The IP attempted to perform a SIPVicious scan on the VOIP server.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

Unusual Port Numbers: HTTP requests to unusual port numbers could be a sign of someone probing for an open, vulnerable port.

Repeated Broken Authentication: Tons of successful authentication requests with unassociated actions could depict broken authentication mechanism.

This IP belongs to Bristol-Myers Squibb.

This IP belongs to Comcast.

Attempts to access the server using unusual HTTP methods or request types.

It attempted to send emails with malicious links from the Mail server.

This IP belongs to Anthem.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

This IP belongs to Amazon Web Services.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

This IP belongs to Home Depot.

POST /modules/raptor_file_manager/upload.php: Attempt to use a known flaw in the Raptor file manager for arbitrary file upload.

This IP belongs to Bank of America.

Executed numerous SQL injection attacks in an attempt to manipulate the server's databases.

This IP belongs to Microsoft.

GET /configuration.php.old: Trying to locate backup configuration files.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

It attempted to take advantage of misconfigurations in the Apache server.

The IP performed regular system foot printing to gain intel on weak points in our server.