The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

The IP attempted to perform ARP Spoofing attacks on the Apache server.

This IP belongs to Bank of America.

Never seen this IP on my device before... Running no vpn/proxy, and I'm located in Cleveland Ohio

This IP injected exploit kit into our system, taking advantage of software vulnerabilities.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

Login Attempts with Automated User-Agents: Logs reflect requests to login page with 'bot' or 'spider' in user-agent strings.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

Unusual increase in network bandwidth usage.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

This IP belongs to World Fuel Services.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

Multiple requests with the same X-UIDH header.

It made multiple requests with the same X-Requested-With header.

This IP belongs to Linode.

The IP launched HTTP tunnel attacks, attempting to wrap other protocols in HTTP to bypass network filters.

The IP attempted to register with the Asterisk server using an invalid username.

GET /cgi-bin/test.cgi: Could indicate the threat actor is trying to exploit older, less secure scripting interfaces.

Multiple requests with identical request parameters.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

It was responsible for an unusual increase in server CPU usage.

This IP belongs to Telstra.