This malicious IP was reported for attempting to perform a FTP Phishing attack, creating a fake FTP login page to deceive users into providing their credentials.

The IP attempted to perform Session Hijacking attacks on the Apache server.

It attempted to perform a password spraying attack on the IMAP server.

It attempted to send emails from the Postfix server to a large number of recipients.

GET /server-status: Often an attempt to check Apache server status.

It attempted to perform a Quake Network Protocol amplification attack on the SSH server.

This IP belongs to Sky Broadband.

It was flagged that this IP had been used in conducting method tampering on our servers.

It initiated 'HOIC' (High Orbit Ion Cannon) to overload our Apache service with junk data.

The IP was involved in a FTP Anonymity attack, exploiting anonymous FTP access to upload or download files without detection.

It made multiple requests with the same X-Forwarded-For header.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

The IP attempted to use the FTP server to distribute DDoS attack tools.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

This IP belongs to Cox Communications.

It attempted to delete directories on the FTP server.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

The IP attempted to login to the Postfix server with an invalid username.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

This IP belongs to Comcast.

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

This IP belongs to PepsiCo.

It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.