This IP was caught distributing malicious APK files.

Multiple requests with identical Accept-Charset headers.

This IP belongs to NetEase.

Multiple requests with the same If-Range header.

The IP attempted to use the FTP server to distribute ransomware.

This malicious IP was reported for attempting a Sniffing attack, capturing and analyzing FTP traffic to glean sensitive information.

High Frequency POST Requests: Numerous or unusual POST requests in a short time span could indicate a dictionary or brute force attack on a login page.

This IP belongs to CVS Health.

This IP address from an unusual location has successfully installed malware on our servers.

It sent SIP INVITE requests to non-existent extensions.

Repeated failed attempts to perform actions that require higher privileges.

Participated in the notorious Water Torture attack to overload our DNS servers.

This IP was accused of multiple unauthorized removal of security certificates.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

By leveraging the AgeTunnel software, the IP attempted to establish a covert channel across the SSH session.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

This IP belongs to FedEx.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

It attempted to perform a SIP Register Flood on the Asterisk server.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

This IP belongs to Cigna.

It attempted to perform SQL injection attacks through the Apache server.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

Login attempts at unusual times (e.g., in the middle of the night).

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.