This IP belongs to Costco Wholesale.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

It attempted to use the FTP server to relay data to other systems.

The IP sent malformed SIP requests, potentially indicating an attempt to crash the server.

It attempted to perform a side channel attack on the SSH server.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

Several instances of aggressive advertising spyware have been linked to this IP.

It made multiple requests with identical cookies.

Executed email spoofing attempts pretending to be a trusted party.

It utilized Web scrapers, automatically harvesting content from our server.

This IP belongs to Nexon.

This malicious IP was reported for attempting a Sniffing attack, capturing and analyzing FTP traffic to glean sensitive information.

It utilized a Directory Harvest Attack, attempting to find valid e-mail addresses through guesswork.

The IP attempted to use the FTP server to distribute network mapping tools.

Manipulated HTTP POST Request: Finding HTTP POST requests with adjusted content-length headers to bypass firewall rules.

The IP made multiple requests with identical Accept-Encoding headers.

Unexpected changes in the server configuration or installed software.

It attempted to use the SASL server to relay spam.

It attempted to use the VOIP server to perform a reflection DDoS attack.

HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.

Multiple requests with identical cookies.

The IP attempted the notorious Shellshock vulnerability, which could pose a severe threat to our server's resources.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.