It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

Incidents of privacy-invasive software floating in our network were linked to this IP.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

The IP attempted to send emails from the IMAP server without authorization.

The IP was noted for executing SYN flood attacks, purposefully creating half-open connections to deplete server resources.

This IP belongs to Amazon.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.

Our team traced back the IP responsible for multiple mobile device tracking software distributions.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

An identity theft activity was linked back to this malicious IP.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

It attempted to perform Insecure Direct Object References attacks on the Apache server.

This IP belongs to Sysco.

The IP attempted to use the FTP server to distribute DDoS attack tools.

It was responsible for an unusual increase in server CPU usage.

With the introduction of hidden malicious intent, this IP found to be operating masked redirect attacks.

It attempted to send emails from the Mail server to a large number of recipients.

Attempts to use automated scripts or tools for password cracking.

The identified IP address was involved in planting backdoor programs that give excessive control over infected systems.

POST /wp-admin/admin-ajax.php: The Actor may be trying to exploit some vulnerable WordPress theme or plugin.

This IP belongs to Telkom SA.

It attempted to perform Local File Inclusion (LFI) attacks on the Apache server.