The IP attempted to perform a distributed denial of service attack on the SSH server.

This IP was accused of multiple unauthorized removal of security certificates.

The IP attempted to use the FTP server to distribute steganography tools.

This IP belongs to Twenty-First Century Fox.

The IP was reported for hosting a phishing website, deceiving users into providing their sensitive personal or financial information.

Unusual patterns in the Accept-Language header.

Multiple requests with the same If-Range header.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

It attempted to send emails with deceptive subject lines from the Mail server.

This IP belongs to Cigna.

The IP attempted to use the FTP server to distribute spam.

It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

The IP attempted to bypass the SASL server's authentication mechanism.

It attempted to use the FTP server to distribute network scanning tools.

Login attempts from foreign IP addresses.

This IP belongs to Nintendo.

GET /errors.log: Shows an actor trying to access server error logs.

It engaged in a click fraud operation using our server’s communication channels.

It was flagged that this IP had been used in conducting method tampering on our servers.

It attempted to use the FTP server to distribute botnet command and control software.

POST /admin/upload.php?_upl: An attempt to exploit the JQuery File Upload vulnerability.

Multiple requests with the same X-Forwarded-For header.

The IP attempted to perform Directory Traversal attacks on the Apache server.