Multiple requests with the same Via header.

It attempted to perform a replay attack on the SASL server.

It attempted to send emails with malicious links from the Mail server.

Multiple unsuccessful attempts to escalate privileges or access root account.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

This IP belongs to PythonAnywhere.

It attempted to exploit known vulnerabilities in the FTP protocol.

It attempted to perform a credential stuffing attack on the SSH server.

Unusual patterns in the sequence of requests.

It attempted to perform Heap Overflow attacks on the Apache server.

It attempted to perform Heap Overflow attacks on the Apache server.

It attempted to use the Postfix server to relay emails with misleading headers to other servers.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

It attempted command injection attacks, hoping to execute unauthorized commands.

This IP belongs to Alphabet.

It attempted to perform Local File Inclusion (LFI) attacks on the Apache server.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

The IP was detected while sending out malicious spyware-infected emails.

This IP belongs to Cox Communications.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

This IP belongs to Archer-Daniels-Midland.