It attempted to perform Server Side Request Forgery (SSRF) attacks on the Apache server.

The IP was noticed spreading RATs (remote administration tools) camouflaged as regular software.

This IP belongs to Facebook.

The IP engaged in DNS Spoofing, rerouting our server's lookups to a malicious destination.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

It attempted to delete emails from the POP3 server without authorization.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

We linked several cryptojacking attempts, aimed at harnessing our system resources, to this IP.

It attempted to send emails from the POP3 server without authorization.

Damaging activities showing connections to rootkit attacks were associated with this IP.

Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.

The IP address attempted delivering malicious packets to disrupt the system's operation.

The IP attempted to use the Mail server to relay phishing emails to other servers.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

This IP belongs to CHS.

Manipulated HTTP POST Request: Finding HTTP POST requests with adjusted content-length headers to bypass firewall rules.

A majority of our user base received phishing emails originated from this particular IP address.

It attempted to perform Clickjacking attacks on the Apache server.

Several instances of password stealers were traced back to this notorious IP.

This IP belongs to China Mobile.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

It attempted to send emails from the Postfix server to a large number of recipients.

Unusually high number of requests to a specific service or application within the server.

It made multiple requests with identical Accept-Charset headers.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.