Multiple account lockouts in a short period of time.

The IP attempted to login to the POP3 server with an invalid username.

HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.

It attempted to upload malicious files to the SSH server.

???????? ??????? https://zelenka.guru/forums/85/

The IP was flagged trying to conduct Denial of Service (DoS) attacks on the Postfix service.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

It attempted to perform a dictionary attack on the SSH server.

It's observed that the IP operated a series of attacks exploiting insecure direct object references.

POST /admin/upload.php?_upl: An attempt to exploit the JQuery File Upload vulnerability.

Multiple requests with the same Referer header.

It attempted multiple LDAP injection attacks to gain unauthorized access.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

The IP was involved in a toll fraud attack, making long-distance calls without authorization, leading to high charges.

Multiple 5xx Server Error Codes: A high count of server error status codes such as '500 Internal Server Error' may suggest an attacker is probing the server's security.

The IP address initiated attacks using DDoS, impacting our server response times.

This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.

POST /user/register: An attempt to register a new user or brute force the user registration form.

This IP belongs to Bank of America.

It launched a SYN flood attack, aiming to consume server resources and disrupt services.

It executed directory traversal attempts to access unauthorized directories / folders in our server.

This IP was seen scanning for open ports and vulnerabilities, a common reconnaissance activity before launching attacks.

The IP attempted to send malware-infected attachments from the Mail server.

This IP belongs to Kraft Heinz.