This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.

Multiple login attempts using different usernames, suggesting an attacker is trying to guess the correct username/password combination.

The IP attempted to bypass IP blacklisting by rapidly changing its IP address.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

The reported IP was identified as a BadBot, engaging in harmful activities such as unauthorized web scraping and data mining.

The IP was marked attempting to use infamous 'Ramnit' malware to steal sensitive Apache server data.

It attempted to use the FTP server to distribute traffic monitoring tools.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

It attempted to perform Session Prediction attacks on the Apache server.

It attempted to use the FTP server to distribute virus creation tools.

GET /server-status: Often an attempt to check Apache server status.

The IP attempted to brute force the password to gain mail account access.

This IP belongs to Facebook.

The IP was detected while sending out malicious spyware-infected emails.

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

This particular IP displayed behaviour typical of a ransomware-infected system, encrypting several files.

The IP attempted to use the POP3 server to relay spam.

This IP belongs to Cisco Systems.

This IP belongs to BT Central Plus.

Several phishing emails have been traced back to this suspicious IP address.

An identity theft activity was linked back to this malicious IP.

This IP belongs to Home Depot.

je sais pas cest koi mais je recois ses emails que je suis pas abonne au quebec . merci

This IP has been linked to numerous occurrences of spyware distribution within our networks.