The IP attempted to use the FTP server to distribute DDoS attack tools.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

The IP's involvement in spreading password stealers has compromised our network's protection.

Repeated failed attempts to perform actions that require higher privileges.

Multiple requests with identical Accept-Charset headers.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

This IP belongs to American Express.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

Web shell Upload: Logs may show successful POST requests to server upload functionality, indicating an attempt to upload a malicious web shell.

The IP attempted to use the FTP server to distribute steganography tools.

It launched invasive malware to corrupt crucial segments of our server functionality.

The IP attempted to flood the Apache server with requests, in a Denial of Service (DoS) attack.

The malicious IP attempted to exploit server misconfigurations to gain higher-level access.

It was found that the IP has been exploiting zero-day vulnerabilities in our system.

A sudden spike in bandwidth usage, which can indicate a brute force attack.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

Attempts to access the server using outdated or insecure protocols, which can indicate an attacker is trying to exploit known vulnerabilities.

The IP address attempted to login to the Mail server with an invalid username.

The IP was linked to numerous attacks using web shells through web servers.

Multiple login attempts from different geographical locations in a short period of time.

It made multiple requests with the same X-Att-Deviceid header.

This malicious IP was reported for attempting a man-in-the-middle attack on the VoIP server, intercepting and potentially altering communication.

This IP belongs to Vkontakte.

It attempted to login to the SSH server with an invalid password.

amirghafarisarvestani 07/03/1368 iran,shiraz. 71647_17398 5892_1015_7312_5552 sepah bank 22800_6955_5