It attempted to use the FTP server to distribute password recovery tools.

It attempted to use the FTP server to distribute encryption tools.

This IP belongs to Fannie Mae.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

This IP belongs to Baidu.

Multiple requests with identical Accept-Encoding headers.

It attempted to perform Race Condition attacks on the Apache server.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

It attempted to send emails with malicious links from the Postfix server.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

It made multiple requests with identical Accept-Charset headers.

Unusually high number of requests to the login page.

It attempted to perform a Teardrop attack on the SSH server.

The IP was seen making repeated calls to premium-rate numbers, a common form of VoIP fraud.

This IP belongs to Medium.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

This IP belongs to OVH.

This IP belongs to Vodafone.

It attempted to send emails from the Mail server to a large number of recipients.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

It attempted to perform a password spraying attack on the IMAP server.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

The IP attempted to perform a password spraying attack on the SSH server.

It attempted to use the FTP server to distribute network scanning tools.

This IP belongs to Medium.