Server Scanning for Software Version: Influx of HTTP requests attempting to detect software version running on the server.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

The IP attempted to perform Directory Traversal attacks on the Apache server.

This IP belongs to Target.

The IP was detected while sending out malicious spyware-infected emails.

This IP belongs to CenturyLink.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

This IP belongs to NetEase.

The IP was involved in a war dialing attack, dialing a large number of phone numbers to find modems, fax machines, and unsecured VoIP devices.

Unusually high number of requests to a specific service or application within the server.

It tried to use the email server for bounce spam, of sending out spam to third parties with forged return paths.

The IP was seen engaging in a Slowloris attack, holding as many connections to the target web server open for as long as possible, eventually overloading the server.

This IP belongs to Exxon Mobil.

The IP was marked trying to carry out Backscatter spam by replying to spam using the server's configuration.

This IP belongs to IBM.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.

Repeated requests for the same file or page, indicating an attempt to crack a password or exploit a vulnerability.

This IP belongs to Ziggo.

POST /user/password?name[0,%20bypass]=dav&name[0]=loup&pass-reset-token-1=D&form_id=user_pass: Drupalgeddon2 exploit which allows remote code execution.

It tried to use the email server for bounce spam, of sending out spam to third parties with forged return paths.

This IP belongs to Target.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

Login attempts from foreign IP addresses.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.