SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

It attempted to send emails from the Postfix server that violate the server's usage policy.

This IP belongs to Dell Technologies.

It attempted to list the contents of directories that it should not have access to.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

It attempted to send emails from the Mail server that violate the server's email content policy.

This IP belongs to Target.

It attempted to use the Postfix server to relay phishing emails to other servers.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

This IP belongs to World Fuel Services.

Executed numerous SQL injection attacks in an attempt to manipulate the server's databases.

The IP was involved in a war dialing attack, dialing a large number of phone numbers to find modems, fax machines, and unsecured VoIP devices.

The IP attempted to send spam emails from the Postfix server.

The IP attempted to perform a replay attack on the IMAP server.

The IP made multiple unsuccessful login attempts to the Mail server in a short period of time.

Content Sniffing: Logs reflect HTTP requests that include the Accept header with " / ", suggesting an attacker is trying to detect what types of content the server will send.

This IP belongs to IBM Cloud Services.

It made multiple requests from user agents claiming to be bots.

This IP belongs to Ford Motor.

It attempted phishing scams by sending malicious mails through compromised accounts.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

It attempted to use the FTP server to distribute phishing emails.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

This IP belongs to Pfizer.