The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

This malicious IP was reported for attempting a FTP Spoof attack, falsifying its IP address to bypass IP-based access controls on the FTP server.

The IP was marked attempting to use infamous 'Ramnit' malware to steal sensitive Apache server data.

Multiple requests to the same endpoint in a short period of time.

This IP belongs to Verizon.

It's observed that the IP operated a series of attacks exploiting insecure direct object references.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.

Repeated Broken Authentication: Tons of successful authentication requests with unassociated actions could depict broken authentication mechanism.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

This IP belongs to Ziggo.

The IP was involved in a SIP brute force attack, attempting to guess SIP authentication credentials to gain unauthorized access.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

This IP belongs to Facebook.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

It attempted to use the FTP server to distribute botnet command and control software.

The IP attempted to register as a SIP user with no password.

It attempted to use the IMAP server to relay spam.

The IP made multiple requests with the same Warning header.

It attempted to perform Clickjacking attacks on the Apache server.

This IP belongs to Johnson & Johnson.

This IP belongs to Freddie Mac.

The IP attempted to use the POP3 server to distribute malware.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.