It exploited insecure server configurations and attempted to establish reverse SSH tunneling.

It attempted to perform Command Injection attacks on the Apache server.

Attempts to access the server using credentials that have been involved in previous security incidents.

It attempted to send emails with deceptive subject lines from the Postfix server.

The IP made multiple requests with the same X-UIDH header.

This IP belongs to SingTel.

It partook in location spoofing, making it appear from different locations.

The IP attempted to send spam emails from the Mail server.

This IP belongs to Citigroup.

This IP belongs to Kraft Heinz.

This IP belongs to Chevron.

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

The IP was caught attempting to execute heap overflow attacks.

Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

This IP belongs to PLDT.

The IP address attempted to exploit known vulnerabilities in server software.

This IP belongs to United Continental Holdings.

This IP belongs to Softbank.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

This IP belongs to Verizon Communications.

It attempted to perform Session Prediction attacks on the Apache server.

Multiple requests with the same Proxy-Authorization header.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.