The IP attempted to send malware-infected attachments from the Postfix server.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

It attempted to login to the IMAP server with an invalid password.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

The IP initiated clickjacking exploits, causing users to unwittingly perform malicious actions during SSH sessions.

Print Requests Repeatedly: Logs illustrate HTTP requests with "?print" parameter multiple times, indicating someone trying to expose sensitive information.

This IP belongs to Dow Chemical.

It attempted to exploit known vulnerabilities in the Mail protocol.

It attempted to use the SIP server as a relay for calls to premium-rate numbers.

This IP belongs to AT&T.

The IP was noticed spreading RATs (remote administration tools) camouflaged as regular software.

The malicious IP was identified trying to leverage the Postfix service to send bulk spam emails.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

It attempted to use the IMAP server to relay spam.

Multiple requests with the same Expect header.

The IP also engaged in website cloning, creating mirror websites to trick users into sharing sensitive data.

It attempted to perform Insecure Direct Object References attacks on the Apache server.

It attempted to use the Postfix server to relay emails with misleading headers to other servers.

It attempted to change file permissions on the FTP server.

This IP belongs to Amazon Web Services.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

It attempted to perform SQL injection attacks through the Apache server.

We flagged down attempts from the IP to leak backdoor viruses into the system.

This IP belongs to New York Life Insurance.