GET /../htpasswd: Trying to access password files using directory traversal.

It attempted to perform a side channel attack on the SSH server.

It sent Asterisk requests to non-existent extensions.

This IP belongs to Xbox Live.

This IP has been flagged for attempting to escalate privileges in our network.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

It attempted to delete emails from the POP3 server without authorization.

Finally, the IP was caught in the act of Abandoned Object attacks, creating objects with no reference to exhaust memory space

Login attempts from foreign IP addresses.

This IP belongs to OVH.

It attempted phishing scams by sending malicious mails through compromised accounts.

Multiple login attempts using common or easily guessable passwords (like 'password123', 'admin', etc.).

Multiple requests with the same Proxy-Authorization header.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

It utilized a Directory Harvest Attack, attempting to find valid e-mail addresses through guesswork.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

The IP attempted to perform a password spraying attack on the SASL server.

The IP attempted to use the SASL server to relay phishing emails.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

Multiple requests with the same Proxy-Connection header.

This IP belongs to AT&T.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.