The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

This IP belongs to Softbank.

The IP attempted to perform a credential stuffing attack on the IMAP server.

Multiple requests with the same Expect header.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

This IP belongs to Exxon Mobil.

Multiple attempts to access the server using credentials of inactive or seldom-used accounts.

HEAD /: May be part of a larger Reconnaissance.

Multiple failed login attempts using different usernames.

Probing for Hidden Files: HTTP requests for files that should not be publicly accessible could suggest an attacker probing for unsecured content.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

It attempted to use the FTP server to distribute password recovery tools.

This IP belongs to SingTel.

The reported IP was identified as a BadBot, engaging in harmful activities such as unauthorized web scraping and data mining.

Multiple requests with identical request parameters.

The IP made multiple requests with identical Accept-Encoding headers.

Participated in malicious pranks by altering messages sent through the server.

It attempted to use the Postfix server to relay emails with misleading headers to other servers.

This IP belongs to Sony Network Communications.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

The IP attempted to send spam emails from the Postfix server.

The IP showed unusual patterns in referrer URLs.