This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.

It was making constant NDR (Non-Deliverable Receipt) or backscatter attacks by generating large amount of invalid email addresses.

This IP was implicated in attempts to inject ransomware into our systems.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

This IP has been marked as the origin of numerous SQL injection attacks.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

This IP belongs to Boeing.

This IP belongs to Northwestern Mutual.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

A multitude of spyware-infected download wrappers were linked to the spotted IP address.

Multiple failed login attempts using different usernames.

It made multiple requests with the same X-Requested-With header.

The IP attempted to create new directories on the FTP server.

POST /upload.php: An attempt to upload a possibly malicious file.

This IP belongs to Microsoft Azure.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

The IP attempted to send emails with misleading headers from the Postfix server.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

This IP belongs to Shopify.

The IP was flagged trying to conduct Denial of Service (DoS) attacks on the Postfix service.