The IP was noted for executing SYN flood attacks, purposefully creating half-open connections to deplete server resources.

Login attempts from foreign IP addresses.

The IP sent numerous VOIP OPTIONS requests in a short time.

The IP made multiple requests with the same Origin header.

It attempted to use the FTP server to distribute hacking tools.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

Usage of Obscure HTTP Verbs: Seeing non-standard HTTP methods like DEBUG, PUT, or CONNECT could imply a web-based attack.

This malicious IP was reported for trying to perform a FTP Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

The said IP was the source of several rootkit deployment attempts.

The IP attempted to use the FTP server to distribute child pornography.

This IP was accused of multiple unauthorized removal of security certificates.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

This IP belongs to Valero Energy.

Fileless malware dissemination has been observed from this IP address.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

This IP belongs to Sysco.

This IP belongs to Walmart.

It utilized Web scrapers, automatically harvesting content from our server.

This IP exhibited malicious sophistication by employing multi-vector attacks.

implemented multiple decryption attacks to gain unauthorized access to encrypted email data.