The IP attempted to list the contents of directories that it should not have access to.

This IP belongs to Google Cloud Services.

This IP belongs to Time Warner Cable Internet.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

Signal of DDoS Attacks: Multiple IP addresses sending a significantly high volume of traffic.

It attempted to perform a brute force attack on the IMAP server.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

This IP belongs to KDDI.

This IP belongs to Goldman Sachs Group.

This IP belongs to Cardinal Health.

It attempted to perform a Steam protocol amplification attack on the SSH server.

Rapid sequence of login attempts.

This IP belongs to AmerisourceBergen.

This IP belongs to Steam.

This IP belongs to Vodacom.

Multiple failed login attempts using different usernames.

GET /setup.php: Effort to locate setup files for PHP applications.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

GET /CFIDE/administrator/enter.cfm: An attempt to get into the ColdFusion admin console.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

This IP belongs to CVS Health.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

Multiple requests with the same DNT (Do Not Track) header.

Fileless malware dissemination has been observed from this IP address.