Several cross-site scripting attacks were traced back to this IP.

POST /user/register: An attempt to register a new user or brute force the user registration form.

It attempted to send emails from the Postfix server to email addresses that have previously marked emails from the server as spam.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

Multiple requests from user agents claiming to be bots (e.g., Googlebot) that do not match known bot IP ranges.

Our system logs indicate this IP has been pushing illegitimate browser plugins into our network.

This IP belongs to Tech Data.

The IP attempted to send spam emails from the Mail server.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

Unusual activity in the server's error logs.

This IP belongs to CVS Health.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

The IP attempted to exploit known vulnerabilities in the SIP protocol.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

The IP was involved in a FTP Fuzzing attack, sending random or malformed data to the FTP server to cause a crash or reveal vulnerabilities.

It engaged in mail bombing, flooding the server with large amounts of insignificant mails.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

This IP belongs to Anthem.

This IP belongs to Google Cloud Services.

Repeated attempts to access the server using insecure or deprecated methods.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

The IP attempted to perform a replay attack on the SSH server.

It attempted to delete emails from the POP3 server without authorization.

The IP attempted to exploit known vulnerabilities in the VOIP protocol.