Unusual increase in server CPU usage.

GET /cfide/administrator: Looking for misconfigured Adobe ColdFusion admin panel.

It attempted to upload malicious files to the SSH server.

It carried out key logging attempts, hoping to record keyboard inputs during SSH sessions.

The IP engaged in a mail relay attack, using our server to send spam.

Multiple requests with identical Accept-Charset headers.

GET /login.action: Trying to find a Struts2 application to exploit.

Multiple failed login attempts using different usernames.

The IP attempted to download emails from the POP3 server without authorization.

The malicious IP was involved in a Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

Multiple requests with identical cookies.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

It attempted to use the FTP server to relay data to other systems.

The IP has been traced back to system monitors, aiming to watch and record user activity.

Headless Browser Activity: Logs may show HTTP requests with user-agent strings containing headless browser identifiers.

It attempted to login to the POP3 server with an invalid password.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

It attempted to exploit known vulnerabilities in the SSH protocol.

The IP attempted to perform Session Fixation attacks on the Apache server.

This IP belongs to Humana.

GET /setup.php: Effort to locate setup files for PHP applications.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

It made multiple requests with the same X-Wap-Profile header.