The IP attempted to use the FTP server to distribute zero-day exploit tools.

This IP belongs to Telstra.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

The IP was flagged for attempting dictionary attacks on our user accounts.

It attempted to perform a dictionary attack on the SASL server.

marielavhm@gmail.com

This IP belongs to Jabil.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

It sent SIP INVITE requests to non-existent extensions.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

The IP was flagged for attempting dictionary attacks on our user accounts.

This IP belongs to State Farm Insurance.

This IP belongs to Berkshire Hathaway.

The IP attempted to use the Mail server to relay spam to other servers.

Rudimentary attempts were made by this IP to execute Man-in-the-Browser attacks.

This IP belongs to Lowe's.

It attempted to perform a Smurf attack on the SSH server.

The IP attempted to perform a Fraggle attack on the SSH server.

This malicious IP was involved in a Clickjacking attack, tricking users into clicking on something different from what the user perceives, potentially leading to confidential information disclosure or takeover of their computer.

It attempted to use the FTP server to distribute virus creation tools.

GET /wp-config.php~: Requesting the backup files which may expose sensitive information.

The IP was engaged in port scanning, probing the server for open SSH ports.

Participated in malicious pranks by altering messages sent through the server.

Multiple attempts to access the server using credentials of inactive or seldom-used accounts.