Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

It attempted to perform a SIP Register Flood on the Asterisk server.

The IP was seen performing a CSRF (Cross-site request forgery) attack to manipulate user actions.

This IP belongs to Nexon.

It was observed attempting to exploit known vulnerabilities in the IMAP protocol.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

The IP attempted to brute force the password to gain mail account access.

An identity theft activity was linked back to this malicious IP.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

Multiple attempts to access the server using anonymous or generic user accounts.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

This IP belongs to Airtel.

The IP was seen trying to exploit known vulnerabilities in the Asterisk server, a common tactic for gaining unauthorized access or control.

Multiple requests with the same X-Att-Deviceid header.

This IP belongs to United Technologies.

The IP attempted to perform Missing Function Level Access Control attacks on the Apache server.

It attempted to perform a Newtear attack on the SSH server.

The IP engaged in DNS Spoofing, rerouting our server's lookups to a malicious destination.

It initiated several reverse IP lookup requests, probing for server vulnerabilities.

Unusually high number of requests to the login page.

This IP belongs to Reliance Jio.

By leveraging the AgeTunnel software, the IP attempted to establish a covert channel across the SSH session.

It attempted to perform a Sentinels amplification attack on the SSH server.