It repeatedly attempted to run server-side injection attacks, trying to execute malicious code on our server.

Our team flagged this IP for injecting harmful ActiveX codes.

The IP attempted to perform a dictionary attack on the POP3 server.

It made numerous requests to the same endpoint in a short time.

This IP was distributing rogue security software, misleading users to think their systems are infected.

The IP attempted to use the Mail server to relay phishing emails to other servers.

This IP belongs to NetEase.

The IP attempted to use the FTP server to distribute network mapping tools.

It attempted to send emails from the Mail server to a large number of recipients.

The IP address made multiple requests with identical request parameters.

The IP attempted to send emails from the Mail server without proper authentication.

This IP belongs to Microsoft.

It attempted to perform a man-in-the-middle attack on the SSH server.

The IP attempted to delete directories on the SSH server.

Participated in the notorious Water Torture attack to overload our DNS servers.

This IP belongs to Kroger.

Damaging activities showing connections to rootkit attacks were associated with this IP.

Unusual increase in server CPU usage.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

Multiple login attempts using different usernames, suggesting an attacker is trying to guess the correct username/password combination.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

This IP belongs to Honeywell International.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.