This IP belongs to Bank of America.

It attempted to perform a Newtear attack on the SSH server.

It attempted to delete emails from the IMAP server without authorization.

This IP belongs to Vodacom.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

The IP made multiple requests to the server's robots.txt file.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

This IP was distributing rogue security software, misleading users to think their systems are infected.

The IP address generated an unusual increase in network bandwidth usage.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

GET /admin: Looking for an unprotected admin page.

This IP belongs to AT&T.

The IP attempted to download emails from the POP3 server without authorization.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

The IP was traced back to stealthy installation attempts of clipboard monitors.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

Unusual patterns of behavior, such as login attempts at regular intervals or sequential patterns in the attempted passwords.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

It attempted to use the FTP server to distribute password cracking tools.

This IP belongs to CHS.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

This IP belongs to Kroger.

This IP belongs to Hong Kong Broadband Network.

It attempted to flood the Asterisk server with REGISTER requests.

The IP attempted to perform a man-in-the-middle attack on the SASL server.