The IP attempted to use the FTP server to distribute ransomware.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

Participated in malicious pranks by altering messages sent through the server.

Automated Bot Traffic: Logs are showing an unusual large amount of traffic from known or suspected bot IPs.

It attempted to login to the IMAP server with an invalid password.

The IP address attempted to login to the FTP server with an invalid username.

Print Requests Repeatedly: Logs illustrate HTTP requests with "?print" parameter multiple times, indicating someone trying to expose sensitive information.

The IP was reported for hosting a phishing website, deceiving users into providing their sensitive personal or financial information.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

The IP tried launching Server Query Flooding to overwhelm our server with requests.

This IP belongs to China Mobile.

Multiple requests to the same endpoint in a short period of time.

It persistently tried to exploit weaknesses in the SSH communication encryption.

Unusually high number of requests to the login page.

It attempted to perform a NTP amplification attack on the SSH server.

This IP has been identified as running a botnet targeting our server systems with ransomware.

GET /administrator.php: Attempting to access an admin interface.

This IP belongs to Alphabet.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

It attempted to send emails from the Mail server that violate the server's email content policy.

It executed directory traversal attempts to access unauthorized directories / folders in our server.

The IP address has been marked as the source of RAM scrapers aiming to steal sensitive data.

This IP belongs to Target.

Multiple requests with the same TE (Transfer Encoding) header.

The IP attempted to perform a timing attack on the SSH server.