The IP was seen trying to perform a PASV FTP Bounce attack, misusing the passive mode to scan other hosts and ports.

Multiple requests with the same X-Forwarded-For header.

This IP belongs to PepsiCo.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

This IP belongs to Freddie Mac.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

Multiple requests with identical request parameters.

It attempted to exploit known vulnerabilities in the POP3 protocol.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

It attempted to send emails from the Postfix server to email addresses that have previously marked emails from the server as spam.

Connection Timeout Abuse: Logs illustrating excessive requests that aim to use up server connections.

This malicious IP was reported for attempting a Smurf attack, flooding a target system via spoofed broadcast ping messages.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

It attempted to exploit known vulnerabilities in the IMAP protocol.

Our data revealed this IP distributing malicious powershell scripts.

This malicious IP was reported for trying to intercept VoIP calls, a type of eavesdropping attack aimed at capturing sensitive information.

Login attempts at unusual times (e.g., in the middle of the night).

It attempted to send emails with malicious links from the Mail server.

This IP belongs to Lockheed Martin.

This IP belongs to AT&T.

Unusual patterns in session IDs.

This IP belongs to MetLife.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

The IP attempted to send emails with misleading headers from the Postfix server.