It attempted to exploit known vulnerabilities in the FTP protocol.

Web-based Command Injection: Logs indicating command injection attempts via web-based forms or query parameters.

It tried to create buffer overflows by sending large amounts of data at once to overwhelm server resources.

It was discovered using our server in an open relay configuration, sending emails from unauthorized domains.

The IP attempted to use the SASL server to relay phishing emails.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

Fileless malware dissemination has been observed from this IP address.

It attempted to perform a Chargen amplification attack on the SSH server.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

The IP attempted to use the SASL server to relay phishing emails.

This IP belongs to American Express.

POST /WebResource.axd: Attempting to exploit a known .NET vulnerability.

Spear Phishing Attempts: Rare but possible to find indicators of spear-phishing campaigns targeting your employees or users.

This IP belongs to Alibaba Cloud Services.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

The IP attempted to use the Mail server to relay emails with misleading headers to other servers.

It attempted to list the contents of directories that it should not have access to.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

The IP attempted the notorious Shellshock vulnerability, which could pose a severe threat to our server's resources.

It launched invasive malware to corrupt crucial segments of our server functionality.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

A string of malicious e-commerce apps installations were linked to this IP.

This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.

The IP attempted to perform Session Fixation attacks on the Apache server.

It attempted to perform a SIP Register Flood on the SIP server.