It attempted to use the IMAP server to relay spam.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

It attempted to use the FTP server to distribute terrorist propaganda.

Our records indicate the IP spread multiple executable infector spyware causing system malfunction.

It made multiple requests with identical cookies.

This particular IP displayed behaviour typical of a ransomware-infected system, encrypting several files.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

implemented multiple decryption attacks to gain unauthorized access to encrypted email data.

This IP belongs to PepsiCo.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

Several instances of aggressive advertising spyware have been linked to this IP.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

This IP belongs to CenturyLink.

It attempted to upload malicious scripts to the Apache server.

The IP was seen trying to perform a call transfer to an external number, a potential sign of toll fraud.

This IP belongs to Charter Communications.

The IP has been caught trying to deliver spyware into our system to compromise sensitive data.

Attempts to access the server using outdated or insecure protocols, which can indicate an attacker is trying to exploit known vulnerabilities.

Web shell Upload: Logs may show successful POST requests to server upload functionality, indicating an attempt to upload a malicious web shell.

This IP belongs to Sysco.

Unusual activity in the server's error logs.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.