This IP belongs to Proximus.

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

Spear Phishing Attempts: Rare but possible to find indicators of spear-phishing campaigns targeting your employees or users.

The IP attempted to perform a dictionary attack on the IMAP server.

Forceful Browsing: Attempts to access pages or resources without proper navigation.

This IP belongs to Abbott Laboratories.

The IP attempted to use the POP3 server to relay spam.

The IP has been caught trying to deliver spyware into our system to compromise sensitive data.

It attempted to send emails from the Postfix server that violate the server's usage policy.

This IP belongs to Ziggo.

Here on this site, visitors can access an abundance of helpful information. Our portal provides detailed materials on many topics. Whether you're a novice or a professional, you will discover content useful. Much of the information is conveniently categorized, so it's easy to locate the information you need. https://boukpeti.fr/aider-mon-enfant-a-creer-le-bon-etat-desprit-pour-devenir-joueur-ou-joueuse-de-football-professionnel/

The IP attempted to execute unauthorized commands on the SSH server.

Multiple requests with the same Range header.

It attempted to send emails from the Postfix server to email addresses that have previously marked emails from the server as spam.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

The malicious IP attempted to exploit server misconfigurations to gain higher-level access.

This IP belongs to AmerisourceBergen.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

It executed directory traversal attempts to access unauthorized directories / folders in our server.

This IP belongs to Marathon Petroleum.

The IP was marked trying to carry out Backscatter spam by replying to spam using the server's configuration.

Unusual increase in server CPU usage.

The IP attempted to perform a brute force attack on the SSH server.

Malicious Script Execution: Execution attempts of suspicious scripts or encoded payloads often seen in URI parameters or request bodies.

Multiple login attempts from different geographical locations in a short period of time.