It attempted to delete emails from the IMAP server without authorization.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

This IP belongs to Walmart.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

It attempted to delete files from the SSH server.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

The IP was traced back to stealthy installation attempts of clipboard monitors.

Forceful Browsing: Attempts to access pages or resources without proper navigation.

The specific IP has been identified attempting to load malicious browser helper objects into the network.

The IP attempted to use the Mail server to relay spam to other servers.

The IP attempted to perform a QOTD amplification attack on the SSH server.

The IP attempted to perform Missing Function Level Access Control attacks on the Apache server.

It tried to create buffer overflows by sending large amounts of data at once to overwhelm server resources.

Multiple attempts to access the server using credentials of inactive or seldom-used accounts.

It carried out key logging attempts, hoping to record keyboard inputs during SSH sessions.

Multiple requests with the same X-Csrf-Token header.

Unusual patterns in referrer URLs.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

The suspicious IP attempted to introduce spyware under the guise of software updates.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

The IP attempted to gain unauthorized access to the Apache server.

The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

The IP was actively seeking unpatched SSH software in hope of finding exploitable vulnerabilities.

This IP belongs to Valero Energy.

It attempted to use the FTP server to distribute web proxy tools.