The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

The IP attempted to use the SSH server to relay data to other systems.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

The IP attempted to perform a brute force attack on the SASL server.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

This malicious IP was reported for attempting to initiate a large number of simultaneous calls, a sign of a potential DDoS attack.

Unusual Port Numbers: HTTP requests to unusual port numbers could be a sign of someone probing for an open, vulnerable port.

This IP belongs to Amazon Web Services.

This IP belongs to Prudential Financial.

It attempted to move emails to different folders on the IMAP server without authorization.

This IP was traced back to several attempts to access domain admin credentials.

The IP attempted a race condition attack, aiming to execute unwanted sequences in the server.

It attempted to perform a brute force attack on the POP3 server.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

The IP attempted to perform a SIP Invite Flood on the Asterisk server.

Multiple requests using HTTP methods that are not typically used (e.g., TRACE).

The IP attempted to send emails from the Postfix server that violate the server's email sending limits.

This IP belongs to Ford Motor.

The IP was noted for executing SYN flood attacks, purposefully creating half-open connections to deplete server resources.

This IP belongs to Zayo Bandwidth.

Conducted various IP scans, seeking loopholes in our network's security.

It initiated multiple account lockouts in a short period.

Several cross-site scripting attacks were traced back to this IP.

This IP belongs to OVH.