This IP belongs to American Express.

It attempted to delete directories on the FTP server.

This IP attempted to disrupt our systems through the propagation of worms.

This IP belongs to Lockheed Martin.

The said IP was the source of several rootkit deployment attempts.

It attempted to perform a credential stuffing attack on the SSH server.

GET /wp-config.php~: Requesting the backup files which may expose sensitive information.

It attempted to delete emails from the IMAP server without authorization.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

This IP belongs to Lockheed Martin.

Our data indicates this IP has performed data breaches by launching phishing attacks.

This IP belongs to Globe Telecom.

The IP engaged in a mail relay attack, using our server to send spam.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

The IP has been distributing browser hijackers that alter the user's browsing experience without their consent.

This IP was traced back to several attempts to access domain admin credentials.

Unusual patterns in the sequence of requests.

This particular IP attempted to exploit vulnerabilities in our web applications.

Multiple requests with the same X-Forwarded-For header.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

This IP addressed employed a method of brute force attack attempting to compromise our systems.

Attempts to access the server using unusual HTTP methods or request types.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

It attempted to send emails from the Postfix server that violate the server's email content policy.