POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

It attempted to perform a dictionary attack on the SASL server.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

The IP attempted to perform a VOIP Hopper scan on the SIP server.

Incidents of privacy-invasive software floating in our network were linked to this IP.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

This IP gave off a red flag for hosting a hidden command and control server for malicious bots.

This IP belongs to Nexon.

The IP attempted to use the FTP server to distribute secure deletion tools.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

It made multiple requests from user agents claiming to be bots.

This IP belongs to Dell Technologies.

The handler of this IP has been exploiting scumware to disrupt our users' browsing experience.

This IP belongs to Comcast.

It attempted to perform Heap Overflow attacks on the Apache server.

The IP address made multiple requests with identical request parameters.

It attempted to perform a man-in-the-middle attack on the POP3 server.

POST /modules/raptor_file_manager/upload.php: Attempt to use a known flaw in the Raptor file manager for arbitrary file upload.

Multiple login attempts from different geographical locations in a short period of time.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

The IP made multiple requests with identical Accept-Encoding headers.