It attempted to use the FTP server to distribute brute force tools.

The IP was flagged for attempting dictionary attacks on our user accounts.

The IP attempted to use the FTP server to distribute data recovery tools.

The IP sent malformed SIP requests, potentially indicating an attempt to crash the server.

The IP attempted fileless malware attacks, directly injecting malicious script into server memory.

This IP belongs to Netflix.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

Automated Bot Traffic: Logs are showing an unusual large amount of traffic from known or suspected bot IPs.

This IP belongs to State Farm Insurance.

GET /../htpasswd: Trying to access password files using directory traversal.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

Unusual network traffic patterns, such as a high amount of outbound traffic.

The IP attempted fileless malware attacks, directly injecting malicious script into server memory.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

A dangerous data surveillance spyware was tied back to this IP.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

It attempted to send emails with deceptive subject lines from the Postfix server.

The IP attempted to send emails with misleading headers from the Mail server.

The IP attempted to use the POP3 server to relay spam.

It attempted to use the FTP server to distribute zombie network tools.

This IP belongs to Mondelez International.

Multiple login attempts using common or easily guessable passwords (like 'password123', 'admin', etc.).

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

It made multiple requests with the same Expect header.

This malicious IP was reported for attempting a FTP Spoof attack, falsifying its IP address to bypass IP-based access controls on the FTP server.