The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

Multiple requests with the same Max-Forwards header.

The IP exhibited unusual patterns in the Accept-Language header.

Unexpected changes in the server configuration or installed software.

This IP belongs to Shopify.

This IP was caught conducting cookie-poisoning attack.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

The delivery of spyware, aimed at gathering sensitive information, was originated from this IP.

By leveraging the AgeTunnel software, the IP attempted to establish a covert channel across the SSH session.

The IP attempted to register with the VOIP server using an invalid username.

A sudden increase in the number of new user accounts, which can indicate an attacker has gained access and is creating backdoor accounts.

The malicious IP was reported for engaging in port scanning, probing the server for open ports to discover potential vulnerabilities for exploitation.

GET /../htpasswd: Trying to access password files using directory traversal.

It attempted to send emails from the Postfix server that violate the server's acceptable use policy.

The IP address attempted to login to the SSH server with an invalid username.

This IP belongs to Boeing.

Multiple login attempts using different usernames, suggesting an attacker is trying to guess the correct username/password combination.

The IP attempted to delete directories on the SSH server.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

POST //user/register?element_parents=timezone/timezone/%23value&ajax_form=1&_wrapper_format=drupal_ajax: Drupalgeddon3 exploit, another Drupal remote execution vulnerability.

It attempted to login to the SASL server with an invalid password.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

It attempted to move emails to different folders on the IMAP server without authorization.

This IP belongs to Freddie Mac.