The IP attempted to send spam emails from the Postfix server.

Multiple failed login attempts from the same IP address in a short span of time.

This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

Multiple requests with identical Accept-Charset headers.

The IP has been caught trying to deliver spyware into our system to compromise sensitive data.

This IP belongs to United Technologies.

This IP belongs to Nike.

The IP tried to crack S/MIME encryption for accessing secured email contents.

The IP attempted to use the FTP server to distribute hacking tutorials.

The malicious IP was reported for attempting to manipulate file permissions on the FTP server, potentially to gain unauthorized access or expose sensitive data.

Unusual Cookie Data: Logs show modified cookie data, usually encrypted or base64 encoded, suggestive of a session stealing or poisoning attack.

Multiple requests with the same Range header.

POST /modules/raptor_file_manager/upload.php: Attempt to use a known flaw in the Raptor file manager for arbitrary file upload.

It executed directory traversal attempts to access unauthorized directories / folders in our server.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

Multiple requests with identical Accept-Charset headers.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

This malicious IP was reported for attempting to perform a FTP Phishing attack, creating a fake FTP login page to deceive users into providing their credentials.

The IP made multiple requests with the same DNT header.

Multiple failed login attempts from the same IP address in a short span of time.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

It made multiple requests with the same X-Att-Deviceid header.

It attempted to use the POP3 server to relay phishing emails.

The IP attempted to perform a SIP Invite Flood on the SIP server.

Multiple requests to the password reset page.