It attempted to perform a man-in-the-middle attack on the POP3 server.

High network traffic at unusual times, suggesting an automated process is running.

The malicious IP was suspected of cryptojacking, illicitly using others' computing resources to mine cryptocurrencies.

This IP attempted to distribute malicious Javascript files.

It made multiple requests with the same Range header.

Unusually high number of requests to the login page.

It initiated SSL-Stripping attacks, aiming to downgrade secure HTTPS connections to less-secure HTTP.

The malicious IP was identified trying to leverage the Postfix service to send bulk spam emails.

This malicious IP was reported for attempting to initiate a large number of simultaneous calls, a sign of a potential DDoS attack.

Unauthorized Access Attempts to Admin Directories: Repeated HTTP requests to known admin directories.

It attempted to use the FTP server to distribute botnet command and control software.

The IP attempted to download sensitive files from the Apache server.

The IP attempted to send emails from the Mail server pretending to be from a different sender.

Multiple failed attempts to use the server’s API.

GET /vuln.html: Looking for any page vulnerabilities.

This IP belongs to Freddie Mac.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

Fileless malware dissemination has been observed from this IP address.

The IP was seen trying to perform a TDoS (Telephony Denial of Service) attack, flooding the VoIP server with calls to make it unavailable to users.

High Frequency POST Requests: Numerous or unusual POST requests in a short time span could indicate a dictionary or brute force attack on a login page.

It conducted an incursion on secure shell (SSH), attempting to tamper with encrypted data.

It attempted to use the FTP server to distribute pirated software.

It attempted to perform a Teardrop attack on the SSH server.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.