It attempted to perform Clickjacking attacks on the Apache server.

It attempted to perform a Smurf attack on the SSH server.

This IP belongs to NetEase.

Multiple requests with the same Proxy-Connection header.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

It initiated SSL-Stripping attacks, aiming to downgrade secure HTTPS connections to less-secure HTTP.

It attempted to send emails from the Mail server that violate the server's usage policy.

Malformed Host Headers: HTTP requests with host headers that do not match the site's actual hostname.

The IP address attempted to login to the IMAP server with an invalid username.

This IP gave off a red flag for hosting a hidden command and control server for malicious bots.

It attempted to perform a Newtear attack on the SSH server.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

The IP attempted to send emails with misleading headers from the Postfix server.

The IP attempted to list the contents of directories that it should not have access to.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

Unusually high CPU usage, which can indicate a brute force attack is in progress.

Unauthorized Access Attempts to Admin Directories: Repeated HTTP requests to known admin directories.

It tried to force its way into a secure admin session by trying to hijack the session's cookies.

Executed numerous SQL injection attacks in an attempt to manipulate the server's databases.

It attempted to send phishing emails from the Mail server.

The IP was seen attempting a FTP Smurf attack, flooding the FTP server with echo request packets to cause a denial of service.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

This IP belongs to WordPress.com.

This IP belongs to Medium.