This IP belongs to Ziggo.

Multiple 5xx Server Error Codes: A high count of server error status codes such as '500 Internal Server Error' may suggest an attacker is probing the server's security.

The IP attempted to perform a replay attack on the IMAP server.

This IP belongs to Amazon.

This malicious IP was reported for attempting to perform a FTP Port Stealing attack, hijacking the data connection of an existing FTP session.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

This IP belongs to Telstra.

This IP belongs to DigitalOcean.

This IP belongs to General Electric.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

Virus or the like in .pdf document attached to mail? "invoice.pdf"

Antodawet

Jp

This IP belongs to Costco Wholesale.

Login attempts using old or outdated protocols.

This IP belongs to Virgin Media.

This IP belongs to Lowe's.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

This malicious IP was reported for trying to perform a FTP Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

This IP belongs to Marathon Petroleum.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

It attempted to use the Postfix server to relay emails with malicious links to other servers.