It made successive tries to alter SMTP relay configurations to send unsolicited emails.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

It attempted to use the FTP server to relay data to other systems.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

The IP was involved in a phishing attack, creating a fake webpage to deceive users into providing their sensitive personal or financial information.

This IP belongs to Philip Morris International.

The IP attempted to send spam emails from the Mail server.

It initiated multiple account lockouts in a short period.

Multiple requests from user agents claiming to be bots (e.g., Googlebot) that do not match known bot IP ranges.

It attempted to perform Command Injection attacks on the Apache server.

This IP belongs to Costco Wholesale.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

The delivery of spyware, aimed at gathering sensitive information, was originated from this IP.

It attempted to use the FTP server to store illegal content.

The IP was involved in a SIP brute force attack, attempting to guess SIP authentication credentials to gain unauthorized access.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

The IP used a 'Poodle' attack in attempts to downgrade the server's SSL to a more vulnerable state.

The IP was engaged in email append attacks, trying to add addresses to an existing email or response mid-transit.

It attempted to intercept SSL/TLS secured mail connections to eavesdrop or modify the passing data.

This IP belongs to Microsoft.

The IP attempted to flood the Apache server with requests, in a Denial of Service (DoS) attack.

Attempts to use automated scripts or tools for password cracking.

Rudimentary attempts were made by this IP to execute Man-in-the-Browser attacks.

The IP attempted to execute an intruder software, terrifying users with unwanted content.