Attempts to access the server using unusual HTTP methods or request types.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

It was found initiating attack vectors to exploit SSH agent forwarding.

This IP belongs to American Express.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

The IP attempted to register as an Asterisk user with no password.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

This IP was responsible for circulating malicious images masked with spyware.

The IP was seen engaging in a Slowloris attack, holding as many connections to the target web server open for as long as possible, eventually overloading the server.

This IP belongs to Rogers Cable.

GET /CFIDE/administrator/enter.cfm: An attempt to get into the ColdFusion admin console.

The IP made multiple requests with the same DNT header.

It attempted to send emails with deceptive subject lines from the Mail server.

Rudimentary attempts were made by this IP to execute Man-in-the-Browser attacks.

This IP belongs to KDDI.

It attempted to use the POP3 server to relay phishing emails.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

This IP belongs to Valero Energy.

It showed unusual activity in the server's error logs.

It attempted to delete emails from the POP3 server without authorization.

Unsuccessful attempt to log in to my Microsoft account.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

This IP was traced back to unusual network abnormalities evidencing Ghostware.

The IP attempted to send emails from the Postfix server pretending to be from a different sender.