It utilized a Directory Harvest Attack, attempting to find valid e-mail addresses through guesswork.

The IP address attempted to exploit known vulnerabilities in server software.

This IP belongs to Time Warner Cable Internet.

It launched SQL injection attempts, to break our server database through poorly secured entry fields.

The IP was detected while sending out malicious spyware-infected emails.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

It attempted to perform WSDL Enumeration attacks on the Apache server.

The IP was reported for attempting a DNS Amplification attack, exploiting vulnerabilities in domain name servers to turn initially small queries into much larger payloads.

This IP belongs to Exelon.

Hey, * FTP Mp3 Server and download everything directly https://sceneflac.blogspot.com * Reseller: PayPal, VISA, Bank transfer, Bitcoin, Master Card, Amazon pay, WebMoney... * Software FTPtxt-16 https://www.0daymusic.org/FTPtxt to search for text. * Server's capacity: 440 TB MP3, FLAC, Labels, Music Videos. * Support: FTP, FTPS (File Transfer Protocol Secure), SFTP and HTTP, HTTPS. * Updated on daily: 30GB-100GB, 300-2000 Albums, WEB, Promo, CDM, CDR, CDS, EP, LP, Vinyl... * Unlimited download speed. * Files are available every time. * More 17 years Of archives. * Overal server's speed: 1 Gb/s. * Easy to use Most of genres are sorted by days.

This IP belongs to Dow Chemical.

GET /configuration.php.old: Trying to locate backup configuration files.

This IP was responsible for circulating malicious images masked with spyware.

The IP attempted to use the FTP server to distribute spam.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

The IP attempted to register as an Asterisk user with no password.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

The IP sent numerous VOIP OPTIONS requests in a short time.

It was observed attempting to exploit known vulnerabilities in the IMAP protocol.

This malicious IP was reported for attempting to perform a FTP Phishing attack, creating a fake FTP login page to deceive users into providing their credentials.

The IP attempted to mark emails as read on the IMAP server without authorization.

Attempts to access the server using known malicious IP addresses or domains.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

Login attempts at unusual times (e.g., in the middle of the night).