It attempted to send emails from the Mail server that violate the server's acceptable use policy.

A sudden surge in the number of requests per second, indicating an automated process.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

This IP belongs to Heroku.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

It attempted to use the FTP server to distribute SQL injection tools.

The IP attempted to use the FTP server to distribute malware.

The IP attempted to use the FTP server to distribute forensics tools.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

It attempted to send emails from the Mail server that violate the server's usage policy.

This IP belongs to Anthem.

An alarming frequency of microphone loggers has been traced back to this IP.

The IP made multiple requests with the same Via header.

The IP attempted to perform a replay attack on the IMAP server.

The IP attempted to download emails from the IMAP server without authorization.

The identified IP address was involved in planting backdoor programs that give excessive control over infected systems.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

This IP belongs to Hong Kong Broadband Network.

This IP belongs to AT&T.

This IP belongs to Citigroup.

This IP blocked legitimate users by performing IP hijacking.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

Distributed session hijackers from the IP were designed to capture and exploit web browser sessions.

Multiple login attempts from different geographical locations in a short period of time.