The IP attempted to use the FTP server to distribute secure deletion tools.

This IP was reported for attempting to use the SIP server to mask its true location and identity, a common tactic in VoIP phishing attacks.

This IP belongs to AT&T.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

Multiple requests with identical cookies.

This IP belongs to AT&T.

It attempted to use the SASL server to distribute malware.

The IP attempted to use the POP3 server to distribute malware.

The IP was seen trying to exploit known vulnerabilities in the Asterisk server, a common tactic for gaining unauthorized access or control.

This IP belongs to Cardinal Health.

Multiple requests with the same X-Forwarded-For header.

Our technical team unearthed the IP's involvement in distributing malicious mobile spyware.

The IP attempted to perform a replay attack on the POP3 server.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

The IP attempted to use the FTP server to distribute VPN tools.

The IP address attempted to exploit known vulnerabilities in the Apache server software.

The IP address initiated multiple unsuccessful login attempts.

Multiple requests with the same Warning header.

It showed unusual activity in the server's error logs.

Because of numerous attacks using malicious mobile code, this IP has been blacklisted.

Suspicious URL Encoding: Seeing HTTP requests with a lot of %, suggesting URL encoding to evade detection.

Repeated attempts to upload or execute files, which can indicate an attempt to install malicious software.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

This IP belongs to Verizon Communications.

It attempted to perform Heap Overflow attacks on the Apache server.