It attempted to perform a replay attack on the SASL server.

It tried to execute dictionary attacks on our Mail service causing potential delays.

This IP belongs to Netflix.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

Attempts to access the server using known malicious IP addresses or domains.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

This IP belongs to Ziggo.

It attempted to send emails from the Postfix server that violate the server's usage policy.

The IP attempted to use the FTP server as a proxy for other malicious activities.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

This IP belongs to Dell Technologies.

It was detected trying to perform cross-site scripting to bypass the same origin policy on Apache.

The IP attempted a DLL injection attack, hoping to execute malicious code within our SSH processes.

This IP belongs to Verizon Communications.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

This IP belongs to IBM.

Multiple requests from user agents claiming to be bots (e.g., Googlebot) that do not match known bot IP ranges.

This IP belongs to Costco Wholesale.

The IP was reported for attempting a Cross-Site Scripting attack, injecting malicious scripts into websites to steal data or disrupt functionality.

The IP was marked attempting to use infamous 'Ramnit' malware to steal sensitive Apache server data.

It attempted to login to the SSH server with an invalid password.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

The IP attempted to perform Session Hijacking attacks on the Apache server.