Print Requests Repeatedly: Logs illustrate HTTP requests with "?print" parameter multiple times, indicating someone trying to expose sensitive information.

The IP attempted to perform a Fraggle attack on the SSH server.

It was discovered illicitly scanning the server for potential vulnerabilities.

The IP was involved in a DDoS attack, sending massive amounts of traffic to overwhelm a server and disrupt its normal functioning.

This IP belongs to American Airlines Group.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

The IP attempted to perform Session Fixation attacks on the Apache server.

Spear Phishing Attempts: Rare but possible to find indicators of spear-phishing campaigns targeting your employees or users.

POST /admin/upload.php?_upl: An attempt to exploit the JQuery File Upload vulnerability.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

The IP attempted to perform a QOTD amplification attack on the SSH server.

It attempted to perform a man-in-the-middle attack on the POP3 server.

It attempted to perform a SSDP amplification attack on the SSH server.

Attempts to use automated scripts or tools for password cracking.

Our technical team unearthed the IP's involvement in distributing malicious mobile spyware.

It tried to force its way into a secure admin session by trying to hijack the session's cookies.

Several instances of password stealers were traced back to this notorious IP.

It attempted to use the Postfix server to relay phishing emails to other servers.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

This IP was linked to an attempt at distributing malicious software within our system.

This IP belongs to Korea Telecom.

This IP belongs to Apple.

Unusual patterns in user agent strings.

The IP made multiple requests with the same TE header.