The IP attempted to perform a SNMP amplification attack on the SSH server.

The IP attempted to use the POP3 server to relay spam.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

It attempted to perform a NTP amplification attack on the SSH server.

Attempts to access the server using stolen or leaked credentials.

The IP attempted to send emails from the IMAP server without authorization.

This IP belongs to Rogers Cable.

This particular IP displayed behaviour typical of a ransomware-infected system, encrypting several files.

The IP made multiple unsuccessful login attempts to the Mail server in a short period of time.

This IP belongs to IBM.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.

The IP attempted to perform a QOTD amplification attack on the SSH server.

This IP belongs to Anthem.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

Repeated attempts to access the server using insecure or deprecated methods.

This IP belongs to Fannie Mae.

The handler of this IP has been exploiting scumware to disrupt our users' browsing experience.

This IP belongs to GitHub.

This IP belongs to Vkontakte.

Excessive traffic from a single IP address.

This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.

It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

GET /cfide/administrator: Looking for misconfigured Adobe ColdFusion admin panel.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.