The IP engaged in a mail relay attack, using our server to send spam.

It attempted to use the FTP server to distribute web proxy tools.

It attempted to perform a phishing attack using the POP3 server.

The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.

It attempted to perform a brute force attack on the POP3 server.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

The IP attempted to use the Mail server to relay phishing emails to other servers.

This IP belongs to Ziggo.

Multiple requests with the same Origin header.

Spam on my email address. Impossible I gave this address, I only use it for order.

This IP belongs to Cloudfare.

The IP made multiple requests with the same Via header.

It attempted to make unauthorized calls using the SIP server.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

This IP belongs to TJX.

The IP attempted to mark emails as read on the POP3 server without authorization.

The IP sent malformed Asterisk requests, potentially indicating an attempt to crash the server.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

This IP belongs to PythonAnywhere.

It attempted to perform a SYN flood attack on the SSH server.

System logs have traced multiple cases of our servers being bombed with trojans to this IP.

The IP attempted to send emails from the Postfix server pretending to be from a different sender.

This IP belongs to Amazon.

The IP attempted to delete files from the FTP server.