Our team discovered that specific IP was distributing intrusive cookie trackers.

The IP attempted to send malware-infected attachments from the Postfix server.

The IP attempted to send spam emails from the Mail server.

This IP belongs to FedEx.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

It attempted to send emails from the Mail server that violate the server's usage policy.

It attempted to use the Postfix server to relay malware-infected attachments to other servers.

This IP belongs to CVS Health.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

It attempted to login to the Mail server with an invalid password.

There were several attempts from this IP to manipulate our server DNS records.

The IP address has been associated with unwanted browser toolbar installations.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

The IP attempted to send emails with misleading headers from the Postfix server.

The IP made multiple requests using uncommon HTTP methods.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

This IP belongs to Comcast.

It attempted to delete directories on the FTP server.

Our team flagged this IP for injecting harmful ActiveX codes.

The IP was reported for attempting a Cross-Site Scripting attack, injecting malicious scripts into websites to steal data or disrupt functionality.

It attempted to perform HTTP Response Splitting attacks on the Apache server.

This IP belongs to Kraft Heinz.

Several instances of aggressive advertising spyware have been linked to this IP.

The IP made multiple requests with the same If-Match header.