It made successive tries to alter SMTP relay configurations to send unsolicited emails.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

The IP was involved in a FTP Flood attack, sending a large number of FTP connection requests to overwhelm the server.

This IP belongs to Orange France Telecom.

The malicious IP attempted to exploit server misconfigurations to gain higher-level access.

The IP attempted to use the FTP server to distribute secure deletion tools.

This IP belongs to Wells Fargo.

Fileless malware dissemination has been observed from this IP address.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

The malicious IP conducted HTTP verb tampering, exploiting varying responses to different HTTP methods.

A sudden surge in the number of requests per second, indicating an automated process.

Attempts to login using a sequential list of passwords, indicating a possible brute force attack.

The IP was engaged in port scanning, probing the server for open SSH ports.

Unusual command line activities that are not typical for the server environment.

The IP attempted the notorious Shellshock vulnerability, which could pose a severe threat to our server's resources.

Attempts to access the server using credentials that have been involved in previous security incidents.

Bursts of login attempts followed by periods of inactivity, suggesting an attacker is trying to avoid detection.

The IP attempted to send emails from the IMAP server without authorization.

This IP belongs to Amazon.

Executed email spoofing attempts pretending to be a trusted party.

It attempted to make unauthorized calls using the SIP server.

It attempted to perform a Sentinels amplification attack on the SSH server.

GET /etc/passwd: An attempt to retrieve Linux server user account details.

This IP belongs to State Farm Insurance.