The IP was found trying to maliciously clone the SSH certificates for privileged access.

This IP belongs to Freddie Mac.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

HTTP Request with Large Content-Length: This could potentially indicate a buffer overflow attack where an attacker tries to crash the system by sending more data than it can handle.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

The IP was involved in attempts of defacing the Apache server website.

The IP attempted to use the FTP server as a proxy for other malicious activities.

This IP belongs to Apple.

It made numerous requests to the same endpoint in a short time.

This malicious IP was reported for attempting a FTP Bounce attack, exploiting the FTP protocol's proxy command to scan ports and networks.

This IP belongs to Humana.

It attempted to send emails from the Postfix server to email addresses that have previously marked emails from the server as spam.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

The IP attempted to use the FTP server to distribute data recovery tools.

The IP attempted to send malware-infected attachments from the Mail server.

The IP attempted to perform a Kad network amplification attack on the SSH server.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

It attempted to use the SASL server to distribute malware.

It attempted to delete emails from the IMAP server without authorization.

It attempted to exploit known vulnerabilities in the Mail protocol.

The IP attempted to delete directories on the SSH server.

POST /modules/raptor_file_manager/upload.php: Attempt to use a known flaw in the Raptor file manager for arbitrary file upload.

It was making constant NDR (Non-Deliverable Receipt) or backscatter attacks by generating large amount of invalid email addresses.

An alarming frequency of microphone loggers has been traced back to this IP.

GET /etc/passwd: An attempt to retrieve Linux server user account details.