The IP was flagged for attempting dictionary attacks on our user accounts.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

This IP has been observed spreading mobile malware, targeting our company application users.

GET /.git/config: Trying to access source code or repository configuration information.

Login attempts using old or outdated protocols.

This IP belongs to Time Warner Cable Internet.

It attempted to change file permissions on the FTP server.

It tried to use the email server for bounce spam, of sending out spam to third parties with forged return paths.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

This IP belongs to Walmart.

It attempted to use the POP3 server to relay phishing emails.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

The IP was seen trying to perform a TDoS (Telephony Denial of Service) attack, flooding the VoIP server with calls to make it unavailable to users.

Side Channel Attacks: Repeated requests aimed at inferring sensitive information through observation of web responses.

This malicious IP was reported for attempting to perform a FTP Port Stealing attack, hijacking the data connection of an existing FTP session.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

This IP belongs to T-Mobile.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

The IP sent numerous Asterisk OPTIONS requests in a short time.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

This IP belongs to Baidu.

It attempted to send emails from the POP3 server without authorization.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

The IP attempted to send emails with misleading headers from the Mail server.

This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.