It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

The IP made multiple unsuccessful login attempts in a short period of time.

The IP attempted to use the SASL server to relay phishing emails.

It showed unusual activity in the server's error logs.

This IP belongs to DigitalOcean.

Connection Timeout Abuse: Logs illustrating excessive requests that aim to use up server connections.

The IP address initiated multiple unsuccessful login attempts.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

It attempted to use the Postfix server to relay spam to other servers.

POST /user/password?name[0,%20bypass]=dav&name[0]=loup&pass-reset-token-1=D&form_id=user_pass: Drupalgeddon2 exploit which allows remote code execution.

It attempted to upload malicious scripts to the Apache server.

The IP attempted to perform a Nestea attack on the SSH server.

This IP belongs to MetLife.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

This IP belongs to Telus Communications.

The IP attempted to perform Directory Traversal attacks on the Apache server.

It attempted to use the FTP server to distribute web proxy tools.

It attempted to use the SIP server to perform a reflection DDoS attack.

Headless Browser Activity: Logs may show HTTP requests with user-agent strings containing headless browser identifiers.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

The IP attempted a Rootkit installation to gain root access and control server activity.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

This IP belongs to Bristol-Myers Squibb.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.