The IP attempted to download emails from the IMAP server without authorization.

The IP sent malformed Asterisk requests, potentially indicating an attempt to crash the server.

The IP attempted to perform Session Hijacking attacks on the Apache server.

Multiple requests with the same Via header.

The IP made multiple requests to the server's robots.txt file.

The IP attempted to send emails from the Postfix server that violate the server's terms of service.

The IP was linked to numerous attacks using web shells through web servers.

The IP attempted to use the FTP server to distribute spam.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

Web-based Command Injection: Logs indicating command injection attempts via web-based forms or query parameters.

The IP has been traced back to system monitors, aiming to watch and record user activity.

This IP belongs to Telkom SA.

This IP belongs to Ford Motor.

This IP belongs to Wells Fargo.

An identity theft activity was linked back to this malicious IP.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

Our team has linked several viruses dissemination activities to this IP.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

It attempted to exploit known vulnerabilities in the IMAP protocol.

The IP attempted to send emails from the Postfix server that violate the server's terms of service.

Fileless malware dissemination has been observed from this IP address.

The IP attempted to exploit known vulnerabilities in the VOIP protocol.

The said IP has been connected to attempts to distribute malicious shopping apps.

The IP attempted to implement a 'BlueKeep' exploit, leveraging protocol vulnerabilities to execute remote code through SSH network services.