The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

Signal of DDoS Attacks: Multiple IP addresses sending a significantly high volume of traffic.

The IP tried to carry out illegal 'HTTP Request Smuggling' to fool the Apache server.

Our data revealed this IP distributing malicious powershell scripts.

A large number of requests from a single user agent, suggesting an automated process.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

GET /login.action: Trying to find a Struts2 application to exploit.

It was discovered using our server in an open relay configuration, sending emails from unauthorized domains.

The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.

This IP was seen scanning for open ports and vulnerabilities, a common reconnaissance activity before launching attacks.

Multiple requests to the server's robots.txt file.

It attempted to send emails from the POP3 server without authorization.

The IP attempted to send emails from the Mail server pretending to be from a different sender.

The malicious IP was reported for attempting to manipulate file permissions on the FTP server, potentially to gain unauthorized access or expose sensitive data.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

GET /../htpasswd: Trying to access password files using directory traversal.

This IP attempted to disrupt our systems through the propagation of worms.

This IP belongs to MTS (Mobile TeleSystems).

It partook in location spoofing, making it appear from different locations.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.

This particular IP tried to perform an unauthorized system configuration change.

Malformed HTTP Version: Observation of logs where HTTP/1.1 or HTTP/2.0 replaced with an unusual alternative to bypass security tools.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

We identified the IP address as a source of numerous scare tactics spyware.