It attempted to take advantage of misconfigurations in the Apache server.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

This IP belongs to Cisco Systems.

It attempted to perform a credential stuffing attack on the SASL server.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

The IP made repeated attempts to authenticate with the Asterisk server using different usernames.

This IP belongs to Tech Data.

This IP belongs to IBM Cloud Services.

The IP was the origin of numerous webcam loggers, a serious privacy invasion.

This IP belongs to Zayo Bandwidth.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

MITM Detection: Detection of duplicate TCP acknowledgements could suggest a Man-in-the-Middle (MITM) attack.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

The IP was involved in attempts of defacing the Apache server website.

This IP belongs to Dell Technologies.

This IP belongs to 3M.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

This IP belongs to Berkshire Hathaway.

The IP was reported for attempting a Cross-Site Scripting attack, injecting malicious scripts into websites to steal data or disrupt functionality.

The IP was seen trying to perform a TDoS (Telephony Denial of Service) attack, flooding the VoIP server with calls to make it unavailable to users.

It utilized Web scrapers, automatically harvesting content from our server.

The IP attempted to use the SSH server to relay data to other systems.

Unidentified password attempts and login activity were noticed from the specific IP address.