FTP Over HTTP: Logs may show HTTP requests containing FTP commands, potentially indicating an FTP Injection attack.

This IP belongs to Rogers Cable.

Incidents of privacy-invasive software floating in our network were linked to this IP.

A sudden increase in the number of new user accounts, which can indicate an attacker has gained access and is creating backdoor accounts.

The IP address initiated attacks using DDoS, impacting our server response times.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

Several cross-site scripting attacks were traced back to this IP.

It tried to execute dictionary attacks on our Mail service causing potential delays.

GET /.git/config: Trying to access source code or repository configuration information.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

This IP belongs to PythonAnywhere.

It executed directory traversal attempts to access unauthorized directories / folders in our server.

This IP belongs to Steam.

Repeated attempts to exploit known vulnerabilities in server software.

The IP attempted to send emails from the Mail server without proper authentication.

It made multiple requests with the same X-Forwarded-For header.

This IP belongs to Apple.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

The said IP was the source of several rootkit deployment attempts.

It initiated multiple account lockouts in a short period.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

The IP attempted to use the FTP server to distribute malware.

The IP was marked trying to carry out Backscatter spam by replying to spam using the server's configuration.

Multiple requests with the same Via header.

This IP belongs to Liberty Mutual Insurance Group.