It attempted to send emails from the Postfix server that violate the server's email content policy.

It was involved in a Distributed Denial of Service (DDoS) attack.

It was found actively trying to exploit HTTP Response Splitting vulnerabilities to perform further attacks.

The IP has been traced back to system monitors, aiming to watch and record user activity.

Multiple login attempts using common or easily guessable passwords (like 'password123', 'admin', etc.).

This IP belongs to Target.

The IP was seen trying to perform a PASV FTP Bounce attack, misusing the passive mode to scan other hosts and ports.

This malicious IP was reported for attempting to execute a Cross-Site Request Forgery (CSRF) attack, tricking a victim into executing unwanted actions on the FTP server.

The IP attempted to perform a timing attack on the SSH server.

The IP used a 'Poodle' attack in attempts to downgrade the server's SSL to a more vulnerable state.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

The IP attempted to perform XML Injection attacks on the Apache server.

It was discovered illicitly scanning the server for potential vulnerabilities.

This IP belongs to State Farm Insurance.

The IP was noticed spreading RATs (remote administration tools) camouflaged as regular software.

This IP belongs to SK Broadband.

The IP attempted to perform a dictionary attack on the POP3 server.

Unusual Cookie Data: Logs show modified cookie data, usually encrypted or base64 encoded, suggestive of a session stealing or poisoning attack.

GET /internal/: Browsing an internal directory.

It attempted to make unauthorized calls using the Asterisk server.

This IP belongs to Heroku.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

The IP attempted to implement a 'BlueKeep' exploit, leveraging protocol vulnerabilities to execute remote code through SSH network services.

The IP was caught distributing VoIP crackers to exploit our communication channels.

It made various efforts to insert spyware to monitor SSH communications covertly.