The IP used a 'Poodle' attack in attempts to downgrade the server's SSL to a more vulnerable state.

Our system flagged this IP as conducting fraudulent transactions activities.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

This IP belongs to the United States Department of Defense.

It made multiple requests with identical cookies.

The IP attempted to perform a downgrade attack on the SSH server.

It attempted to login to the SASL server with an invalid password.

It attempted to login to the Postfix server with an invalid password.

It attempted command injection attacks, hoping to execute unauthorized commands.

This IP belongs to British Telecommunications.

It attempted phishing scams by sending malicious mails through compromised accounts.

The IP made multiple requests to the server's robots.txt file.

It attempted to use the Postfix server to relay emails with malicious links to other servers.

The IP attempted to use the FTP server to distribute keylogging software.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

This IP belongs to Hong Kong Broadband Network.

This IP belongs to Verizon Communications.

This IP belongs to Citigroup.

This IP belongs to NetEase.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

It attempted to use the SIP server as a relay for calls to premium-rate numbers.

The IP attempted to inject malicious scripts into the server hoping it would get executed.

It executed blind command injection, exploiting server inputs to gain unauthorized system control.