The IP attempted to download sensitive files from the Apache server.

The IP attempted the notorious Shellshock vulnerability, which could pose a severe threat to our server's resources.

It showed unusual patterns in the sequence of requests.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

Multiple requests with the same Range header.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

The IP attempted to register as a SIP user with no password.

The IP attempted to use the FTP server to distribute DDoS attack tools.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

The IP attempted to use the FTP server to distribute forensics tools.

This IP belongs to Telstra.

It attempted to send emails from the Postfix server that violate the server's email content policy.

This IP belongs to OVH.

The IP attempted to perform a replay attack on the POP3 server.

It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

Attempts to access the server using known malicious IP addresses or domains.

The said IP has been connected to attempts to distribute malicious shopping apps.

It attempted to perform IP Spoofing attacks on the Apache server.

Multiple requests with the same Referer header.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

This malicious IP was reported for attempting a FTP Bounce attack, exploiting the FTP protocol's proxy command to scan ports and networks.

The IP attempted to use the Mail server to relay spam to other servers.

The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.

This IP belongs to Dow Chemical.