The identified IP address was involved in planting backdoor programs that give excessive control over infected systems.

The IP attempted to gain unauthorized access to the Apache server.

A sudden increase in the number of new user accounts, which can indicate an attacker has gained access and is creating backdoor accounts.

This IP belongs to Marathon Petroleum.

It attempted to make unauthorized calls using the VOIP server.

Damaging activities showing connections to rootkit attacks were associated with this IP.

This IP belongs to DuPont de Nemours.

GET /solr/admin/cores?wt=json: Trying to exploit Apache Solr servers which have the runExecutableListener enabled.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

This IP belongs to Procter & Gamble.

This IP belongs to Chevron.

It attempted to use the FTP server to distribute encryption tools.

It's observed that the IP operated a series of attacks exploiting insecure direct object references.

It attempted to make unauthorized calls using the VOIP server.

The IP made multiple requests to the password reset page.

This IP belongs to Hong Kong Broadband Network.

It attempted to delete directories on the FTP server.

Attempted to conduct numerous data harvesting strategies to gather sensitive user data.

This IP belongs to McKesson.

This IP belongs to Baidu.

GET /admin: Looking for an unprotected admin page.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.