The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

This IP was accused of multiple unauthorized removal of security certificates.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

This IP belongs to Walgreens Boots Alliance.

The IP had been flagged for initiating SYN flood attacks on our servers.

This IP was caught circulating email worms, camouflaged as legitimate mails.

This IP belongs to Citigroup.

Multiple requests to the server's robots.txt file.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

The IP was the origin of numerous webcam loggers, a serious privacy invasion.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

It initiated multiple account lockouts in a short period.

It attempted to use the FTP server to distribute password recovery tools.

The IP attempted to exploit known vulnerabilities in the Asterisk protocol.

GET /wp-config.php~: Requesting the backup files which may expose sensitive information.

Multiple requests with the same Max-Forwards header.

This IP belongs to Deutsche Telecom.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

This IP belongs to KT Corporation.

This IP belongs to Target.

It attempted to perform a Newtear attack on the SSH server.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

This IP belongs to Costco Wholesale.