Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

It made various efforts to insert spyware to monitor SSH communications covertly.

This IP belongs to Nintendo.

This IP belongs to Ford Motor.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

The IP attempted to execute an intruder software, terrifying users with unwanted content.

This IP belongs to PepsiCo.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

The malicious IP was reported for attempting to manipulate file permissions on the FTP server, potentially to gain unauthorized access or expose sensitive data.

The IP was flagged trying to conduct Denial of Service (DoS) attacks on the Postfix service.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

This IP belongs to Target.

This IP belongs to Bell Canada.

Unusually high number of requests to a specific service or application within the server.

It attempted multiple LDAP injection attacks to gain unauthorized access.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

This IP has been marked as the origin of numerous SQL injection attacks.

The IP attempted to exploit known vulnerabilities in the Asterisk protocol.

This IP was reported for attempting a Teardrop attack, sending mangled IP fragments with overlapping and oversized payloads to crash the target network device.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

The IP made multiple unsuccessful login attempts to the Mail server in a short period of time.

Fileless malware dissemination has been observed from this IP address.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.