The IP tried creating false server responses hoping to disrupt the SASL service.

The IP attempted to login to the Postfix server with an invalid username.

This IP belongs to Dell Technologies.

It was discovered illicitly scanning the server for potential vulnerabilities.

This IP belongs to Rogers Cable.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

GET /solr/admin/cores?wt=json: Trying to exploit Apache Solr servers which have the runExecutableListener enabled.

It attempted to use the FTP server to distribute botnet command and control software.

The IP attempted to inject malicious scripts into the server hoping it would get executed.

This IP belongs to Amazon.

Unusual activity in the server's error logs.

The IP attempted to send emails with misleading headers from the Mail server.

GET /configuration.php.old: Trying to locate backup configuration files.

The IP made multiple requests with the same DNT header.

GET /wp-json/wp/v2/users: Trying to extract a list of WordPress users via the REST API.

This IP has been identified as running a botnet targeting our server systems with ransomware.

This IP belongs to Globe Telecom.

The IP attempted to use the FTP server to distribute hacking tutorials.

Participated in the notorious Water Torture attack to overload our DNS servers.

The IP attempted to use the FTP server to distribute secure deletion tools.

This IP was detected initiating zero-day exploit attacks on our system.

This IP belongs to CHS.

The malicious IP tried to brute force its way into the SASL authentication process.

This IP belongs to Rogers Cable.

Several cross-site scripting attacks were traced back to this IP.