The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

This IP belongs to Hong Kong Broadband Network.

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

This IP belongs to Kraft Heinz.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

POST /upload.php: An attempt to upload a possibly malicious file.

POST /j_security_check: May indicate an attempt to bypass Java server page (JSP) login mechanisms.

The IP made multiple requests with the same Proxy-Authorization header.

It performed botnet operations, controlling a group of “zombie” computers to amplify its DDoS attacks.

It launched a privilege escalation attack aiming to gain unauthorized access with higher-level permissions.

This IP belongs to Softbank.

The IP attempted to perform Integer Overflow attacks on the Apache server.

The IP attempted to download sensitive files from the SSH server.

It was discovered using our server in an open relay configuration, sending emails from unauthorized domains.

It attempted to send emails with deceptive subject lines from the Mail server.

The IP made multiple unsuccessful login attempts to the IMAP server in a short period of time.

This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

The malicious IP attempted to gain unauthorized access to the server by repeatedly trying different username and password combinations.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

The malicious IP was involved in a Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

Path Traversal / URI Encoding Attacks: You might notice HTTP GET requests that include ".." or "%2e%2e" or "%252e%252e", indicating a path traversal attack.

The IP sent numerous VOIP OPTIONS requests in a short time.