Repeated attempts to exploit known vulnerabilities in the server operating system or applications.

The IP sent malicious links via IM softwares, aiming to spread instant messaging worms.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

Inclusion of Binary Data in HTTP Request: If binary data is included in the HTTP request, this could suggest an attacker is attempting a binary exploit.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

The IP attempted to send malware-infected attachments from the Mail server.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

This IP belongs to OVH.

Damaging activities showing connections to rootkit attacks were associated with this IP.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

Unusual activity in the server's error logs.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

It made multiple requests with the same Range header.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

Last night, we received an alert regarding this IP attempting to upload keyloggers to our network.

Multiple requests with the same Origin header.

The IP attempted to use the POP3 server to distribute malware.

Several instances of aggressive advertising spyware have been linked to this IP.

It attempted to use the FTP server to distribute identity theft tools.

This IP belongs to Freddie Mac.

It attempted to use the FTP server to distribute traffic monitoring tools.

This IP belongs to Medium.

The malicious IP attempted to gain unauthorized access to the server by repeatedly trying different username and password combinations.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.