The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

It attempted to use the FTP server to distribute password cracking tools.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

The IP actively tried code replacement attacks, swapping legitimate system call addresses with malicious ones.

This IP directed malicious network traffic to our servers with the intent to crash them.

Multiple 5xx Server Error Codes: A high count of server error status codes such as '500 Internal Server Error' may suggest an attacker is probing the server's security.

It attempted to use the FTP server to distribute password recovery tools.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

This IP belongs to Microsoft Azure.

The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

This IP belongs to Telus Communications.

It attempted to send emails from the Postfix server that violate the server's acceptable use policy.

The IP address attempted to exploit known vulnerabilities in the Apache server software.

The IP attempted to send spam emails from the Mail server.

This IP belongs to IBM.

It engaged in mail bombing, flooding the server with large amounts of insignificant mails.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

It attempted to login to the SSH server with an invalid password.

This IP belongs to Alphabet.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

Multiple failed login attempts from the same IP address in a short span of time.