It made successive tries to alter SMTP relay configurations to send unsolicited emails.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

It attempted to use the Postfix server to relay malware-infected attachments to other servers.

The IP showed unusual patterns in referrer URLs.

The IP attempted to gain unauthorized access to the Apache server.

The IP set off alarms for an attempted man-in-the-middle attack on our servers.

The IP actively tried code replacement attacks, swapping legitimate system call addresses with malicious ones.

This IP belongs to Archer-Daniels-Midland.

It attempted to send emails from the POP3 server without authorization.

It made multiple requests with the same Range header.

It attempted to perform Session Sidejacking attacks on the Apache server.

It made multiple requests with the same X-Att-Deviceid header.

It attempted to move emails to different folders on the IMAP server without authorization.

It attempted to use the FTP server to distribute identity theft tools.

It made multiple requests with the same X-Requested-With header.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

This IP belongs to IBM.

This IP belongs to Alibaba Cloud Services.

The IP tried launching Server Query Flooding to overwhelm our server with requests.

Unusual patterns in referrer URLs.

GET /wp-json/wp/v2/users: Trying to extract a list of WordPress users via the REST API.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

This IP was caught conducting cookie-poisoning attack.