Probing for Hidden Files: HTTP requests for files that should not be publicly accessible could suggest an attacker probing for unsecured content.

Rudimentary attempts were made by this IP to execute Man-in-the-Browser attacks.

The IP engaged in a mail relay attack, using our server to send spam.

This IP belongs to Nintendo.

A majority of our user base received phishing emails originated from this particular IP address.

This IP belongs to Hong Kong Broadband Network.

The IP attempted to perform a brute force attack on the SSH server.

The IP attempted to perform a brute force attack on the SSH server.

The IP attempted to send emails from the Mail server that violate the server's terms of service.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

This malicious IP was reported for attempting to perform a FTP Port Stealing attack, hijacking the data connection of an existing FTP session.

It showed an unusually high number of requests to the login page.

Attempts to access the server using known malicious IP addresses or domains.

It attempted to perform a password spraying attack on the IMAP server.

This IP belongs to ConocoPhillips.

It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

GET /.git/config: Trying to access source code or repository configuration information.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

It attempted to delete emails from the IMAP server without authorization.

Signs of Clickjacking: You might observe layered multiple HTTP requests aiming to trick users into unintended interactions.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

It attempted to perform a SYN flood attack on the SSH server.

Unusual increase in network bandwidth usage.