It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

It attempted to use the FTP server to distribute virus creation tools.

Unusual command line activities that are not typical for the server environment.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

This IP belongs to State Farm Insurance.

It initiated insecure direct object references (IDOR) attacks to bypass authorization and directly access SSH resources.

It attempted to use the SASL server to relay spam.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.

This IP belongs to Linode.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

Connection Timeout Abuse: Logs illustrating excessive requests that aim to use up server connections.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

This IP was involved in a Remote File Inclusion (RFI) attack, exploiting a vulnerability to execute malicious scripts from a remote server.

Our team flagged this IP for injecting harmful ActiveX codes.

Several instances of aggressive advertising spyware have been linked to this IP.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.

POST //user/register?element_parents=timezone/timezone/%23value&ajax_form=1&_wrapper_format=drupal_ajax: Drupalgeddon3 exploit, another Drupal remote execution vulnerability.

This IP belongs to Northwestern Mutual.

This IP belongs to Twenty-First Century Fox.

This IP belongs to 3M.

A majority of our user base received phishing emails originated from this particular IP address.

A high number of unsuccessful SSH logins, a common target for brute force attacks.

This IP belongs to Shaw Communications.