Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

The IP attempted a pass-the-hash attack, trying to authenticate without knowing the plaintext password.

Unusually high number of requests to the login page.

It attempted to send emails from the Postfix server to a large number of recipients.

The IP attempted to perform a SIPVicious scan on the VOIP server.

The IP attempted to perform a SNMP amplification attack on the SSH server.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.

The IP address has been involved in distributing adware to our server systems.

It attempted to perform XPath Injection attacks on the Apache server.

The IP attempted a pass-the-hash attack, trying to authenticate without knowing the plaintext password.

Manipulated HTTP POST Request: Finding HTTP POST requests with adjusted content-length headers to bypass firewall rules.

It attempted to carry out a dictionary attack on pop3 logins to gain unauthorized access.

GET /admin: Looking for an unprotected admin page.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

Unusually high number of requests to the login page.

Several instances of password stealers were traced back to this notorious IP.

The IP initiated a 'Deauth' attack, knocking legitimate users off the Apache service.

The IP attempted to list the contents of directories that it should not have access to.

This IP belongs to Reliance Jio.

It started header injection or email injection attempts, by adding extra data into the headers and confusing the server processes.

It persistently tried to exploit weaknesses in the SSH communication encryption.

This IP has been detected spreading notorious credit card skimmers.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.