High Frequency POST Requests: Numerous or unusual POST requests in a short time span could indicate a dictionary or brute force attack on a login page.

The IP address attempted to login to the IMAP server with an invalid username.

Attempts to use automated scripts or tools for password cracking.

This IP belongs to Travelers Cos.

This IP belongs to AT&T.

This particular IP displayed behaviour typical of a ransomware-infected system, encrypting several files.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

It attempted to send emails from the Postfix server that violate the server's email content policy.

It attempted to use the Postfix server to relay spam to other servers.

This IP belongs to Archer-Daniels-Midland.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

Unusual TCP/IP Headers: Logs reflect HTTP requests with unusual or altered TCP/IP headers, an attempt to confuse or slip through security measures.

It attempted to use the FTP server to distribute brute force tools.

The IP was the origin of numerous webcam loggers, a serious privacy invasion.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

It launched invasive malware to corrupt crucial segments of our server functionality.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

GET /admin: Looking for an unprotected admin page.

Several cross-site scripting attacks were traced back to this IP.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

This IP belongs to KT Corporation.