It made multiple requests with identical POST parameters.

Automated Bot Traffic: Logs are showing an unusual large amount of traffic from known or suspected bot IPs.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

It attempted to use the FTP server to distribute wireless cracking tools.

It attempted to use a TearDrop attack to corrupt data packets being sent to our server.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

Multiple requests with the same Max-Forwards header.

It attempted multiple LDAP injection attacks to gain unauthorized access.

This IP belongs to Medium.

This malicious IP was reported for attempting a FTP Bounce attack, exploiting the FTP protocol's proxy command to scan ports and networks.

It attempted to perform a Smurf attack on the SSH server.

The IP attempted to perform ARP Spoofing attacks on the Apache server.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

The IP attempted to use the SSH server to relay data to other systems.

It attempted to use the FTP server to relay data to other systems.

The IP attempted to perform a brute force attack on the SASL server.

It attempted to use the FTP server to distribute brute force tools.

The IP made multiple requests to the server's robots.txt file.

The IP made multiple requests with the same Origin header.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.

This IP belongs to The Walt Disney Company.

It attempted to use the FTP server to distribute brute force tools.