The IP tried to perform a cross-site request forgery attack on the IMAP service.

Multiple requests with identical Accept-Charset headers.

It attempted to exploit known vulnerabilities in the FTP protocol.

This IP belongs to BT Central Plus.

The IP attempted to use the FTP server as a proxy for other malicious activities.

The IP was caught distributing VoIP crackers to exploit our communication channels.

Forceful Browsing: Attempts to access pages or resources without proper navigation.

The malicious IP was spotted attempting to brute-force the SSH login credentials.

It attempted to use the FTP server to distribute identity theft tools.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

This IP belongs to Alibaba Cloud Services.

It attempted to delete directories on the FTP server.

It attempted to use the Postfix server to relay phishing emails to other servers.

This IP belongs to Dell Technologies.

Repeated Broken Authentication: Tons of successful authentication requests with unassociated actions could depict broken authentication mechanism.

This IP belongs to GoDaddy.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

This IP belongs to SK Broadband.

Unusual TCP/IP Headers: Logs reflect HTTP requests with unusual or altered TCP/IP headers, an attempt to confuse or slip through security measures.

Several instances of password stealers were traced back to this notorious IP.

This IP belongs to Fannie Mae.

This IP belongs to Honeywell International.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

This IP belongs to Comcast.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.