The IP attempted to use the Mail server to relay emails with malicious links to other servers.

The IP attempted to perform a brute force attack on the SSH server.

This IP belongs to Comcast.

HEAD /: May be part of a larger Reconnaissance.

It attempted to use the FTP server to distribute zombie network tools.

The IP was caught distributing VoIP crackers to exploit our communication channels.

The IP made repeated attempts to authenticate with the Asterisk server using different usernames.

The IP attempted to perform a replay attack on the POP3 server.

It attempted to use the FTP server to distribute terrorist propaganda.

It attempted to use the FTP server to store illegal content.

This IP belongs to Procter & Gamble.

It initiated several reverse IP lookup requests, probing for server vulnerabilities.

This IP belongs to Lowe's.

The IP attempted to send emails with misleading headers from the Postfix server.

This IP belongs to IBM.

The IP tried to crack S/MIME encryption for accessing secured email contents.

Participated in the notorious Water Torture attack to overload our DNS servers.

Malformed Host Headers: HTTP requests with host headers that do not match the site's actual hostname.

Rudimentary attempts were made by this IP to execute Man-in-the-Browser attacks.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

GET /index.php?param=: Attempting a cross-site scripting (XSS) attack.

Multiple requests with the same Range header.

It repetitively attempted Port Scanning to identify open ports and related vulnerabilities.

It attempted to use the FTP server to distribute SQL injection tools.