The IP address attempted to login to the FTP server with an invalid username.

Executed numerous SQL injection attacks in an attempt to manipulate the server's databases.

GET /cfide/administrator: Looking for misconfigured Adobe ColdFusion admin panel.

Repeated Broken Authentication: Tons of successful authentication requests with unassociated actions could depict broken authentication mechanism.

Multiple requests with identical POST parameters.

The IP attempted to send spam emails from the Postfix server.

Participated in malicious pranks by altering messages sent through the server.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

This IP belongs to Johnson & Johnson.

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

This IP belongs to Softbank.

This IP belongs to Costco Wholesale.

This IP belongs to Baidu.

The IP attempted to download emails from the IMAP server without authorization.

Login attempts that do not follow typical user behavior patterns.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.

It tried to use the email server for bounce spam, of sending out spam to third parties with forged return paths.

This IP belongs to Caterpillar.

This IP belongs to United Continental Holdings.

The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

This IP belongs to Plusnet.

It attempted to perform a Smurf attack on the SSH server.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.