Identification of Known Vulnerabilities: Attempts to exploit known vulnerabilities related to your server application.

It tried to use the email server for bounce spam, of sending out spam to third parties with forged return paths.

A sudden surge in the number of requests per second, indicating an automated process.

The IP attempted to perform a SIP Invite Flood on the Asterisk server.

It attempted to use the SASL server to distribute malware.

It was found that the IP had deployed rogue security software in our system.

Multiple attempts to access the server using credentials of inactive or seldom-used accounts.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

This IP belongs to Fannie Mae.

The IP address attempted to exploit known vulnerabilities in the Apache server software.

It attempted to perform Local File Inclusion (LFI) attacks on the Apache server.

This IP belongs to Vodafone.

Multiple 5xx Server Error Codes: A high count of server error status codes such as '500 Internal Server Error' may suggest an attacker is probing the server's security.

The IP was marked trying to carry out Backscatter spam by replying to spam using the server's configuration.

It made multiple requests with the same Range header.

This IP belongs to Vodacom.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

The IP was involved in a SIP brute force attack, attempting to guess SIP authentication credentials to gain unauthorized access.

It attempted to perform a SYN flood attack on the SSH server.

The IP attempted to delete files from the FTP server.

It attempted to perform a RIPv1 amplification attack on the SSH server.

This IP belongs to BT Central Plus.

This IP belongs to PepsiCo.

It attempted to perform Clickjacking attacks on the Apache server.