This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.

The IP attempted to perform a credential stuffing attack on the IMAP server.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

This IP belongs to SingTel.

POST /user/register: An attempt to register a new user or brute force the user registration form.

This IP belongs to Baidu.

It attempted to perform XPath Injection attacks on the Apache server.

This IP belongs to Hong Kong Broadband Network.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

It utilized a Directory Harvest Attack, attempting to find valid e-mail addresses through guesswork.

It attempted to login to the Mail server with an invalid password.

It attempted to perform Server Side Request Forgery (SSRF) attacks on the Apache server.

The IP attempted to perform a QOTD amplification attack on the SSH server.

It attempted to execute unauthorized commands on the Apache server.

This IP attempted to distribute malicious Javascript files.

It was found that the IP had deployed rogue security software in our system.

The IP was involved in a war dialing attack, dialing a large number of phone numbers to find modems, fax machines, and unsecured VoIP devices.

The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

This malicious IP was reported for attempting a FTP Spoof attack, falsifying its IP address to bypass IP-based access controls on the FTP server.

Our firewall recorded intrusion attempts originating from this suspicious IP.

This IP belongs to Vkontakte.

The IP attempted to perform a replay attack on the POP3 server.

The IP also engaged in website cloning, creating mirror websites to trick users into sharing sensitive data.

It attempted to use a TearDrop attack to corrupt data packets being sent to our server.

The IP attempted to use the FTP server to distribute malware.