Unusual increase in network bandwidth usage.

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

This IP belongs to CHS.

This IP belongs to DigitalOcean.

It made multiple requests with the same X-Requested-With header.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

Multiple requests to the server's robots.txt file.

This IP belongs to AmerisourceBergen.

It attempted to use the FTP server to store illegal content.

The IP attempted to send emails from the Postfix server pretending to be from a different sender.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

It attempted to send emails from the Postfix server to a large number of recipients.

This IP belongs to Prudential Financial.

Repeated connections to the server from unknown or suspicious IP addresses.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

Multiple failed login attempts using different usernames.

This IP belongs to PLDT.

This IP belongs to Linode.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

This malicious IP was reported for attempting a man-in-the-middle attack on the VoIP server, intercepting and potentially altering communication.

This IP gave off a red flag for hosting a hidden command and control server for malicious bots.

This IP belongs to IBM.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

This IP belongs to Hostgator.

It attempted to use the FTP server to distribute wireless cracking tools.