This IP belongs to Heroku.

A string of malicious e-commerce apps installations were linked to this IP.

This IP belongs to Cox Communications.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

Multiple requests with the same X-Att-Deviceid header.

It attempted to change file permissions on the FTP server.

The IP was involved in a SIP brute force attack, attempting to guess SIP authentication credentials to gain unauthorized access.

The IP attempted to perform a man-in-the-middle attack on the SASL server.

This IP belongs to Apple.

Multiple requests with the same X-Att-Deviceid header.

This IP belongs to Goldman Sachs Group.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

The IP attempted to use the FTP server to distribute forensics tools.

Multiple attempts to access the server using encrypted tunnels or proxies.

This IP belongs to Shopify.

It attempted to perform HTTP Parameter Pollution attacks on the Apache server.

It attempted to download sensitive files from the FTP server.

The IP attempted a DLL injection attack, hoping to execute malicious code within our SSH processes.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

Unusual TCP/IP Headers: Logs reflect HTTP requests with unusual or altered TCP/IP headers, an attempt to confuse or slip through security measures.

It attempted to perform Web Service attacks on the Apache server.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

Because of numerous attacks using malicious mobile code, this IP has been blacklisted.