Repeated attempts to access the server using insecure or deprecated methods.

This IP belongs to Deere.

It was detected trying to perform cross-site scripting to bypass the same origin policy on Apache.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

It attempted to perform a credential stuffing attack on the SASL server.

HTTP Request with Large Content-Length: This could potentially indicate a buffer overflow attack where an attacker tries to crash the system by sending more data than it can handle.

The IP attempted to perform Directory Traversal attacks on the Apache server.

The IP initiated fake traffic attacks to manipulate webpage rankings and conduct click fraud.

This malicious IP was reported for trying to intercept VoIP calls, a type of eavesdropping attack aimed at capturing sensitive information.

Multiple attempts to access the server using encrypted tunnels or proxies.

The IP was caught distributing VoIP crackers to exploit our communication channels.

The IP attempted to download sensitive files from the SSH server.

The IP address has been linked to the creation of artificial traffic to crash our website.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

This IP belongs to United Continental Holdings.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.

Incriminating activities involving the distribution of trojan horses were linked to this IP address.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

The malicious IP was suspected of cryptojacking, illicitly using others' computing resources to mine cryptocurrencies.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

This IP belongs to Jabil.

It attempted to use the FTP server to distribute identity theft tools.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

This IP attempted to distribute malicious Javascript files.

Unusual Port Numbers: HTTP requests to unusual port numbers could be a sign of someone probing for an open, vulnerable port.