This IP belongs to Plusnet.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

Unusual system or application errors related to authentication or access controls.

This IP belongs to Heroku.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

It made numerous requests to the same endpoint in a short time.

The detected IP address was responsible for the distribution of botnets aimed at automating data theft.

The IP attempted to use the Mail server to relay emails with misleading headers to other servers.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

The IP attempted to perform a password spraying attack on the SASL server.

The malicious IP was reported for attempting unauthorized logins to the SIP server, potentially to gain control over voice communication.

This IP belongs to Marathon Petroleum.

It attempted to perform Web Service attacks on the Apache server.

Login attempts from foreign IP addresses.

The IP attempted to send malware-infected attachments from the Mail server.

It attempted to perform Web Service attacks on the Apache server.

Our data revealed this IP distributing malicious powershell scripts.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

It made numerous requests to the same endpoint in a short time.

Damaging activities showing connections to rootkit attacks were associated with this IP.

Multiple attempts to access the server using anonymous or generic user accounts.

GET /cfide/administrator: Looking for misconfigured Adobe ColdFusion admin panel.