Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

POST /upload.php: An attempt to upload a possibly malicious file.

It was found initiating attack vectors to exploit SSH agent forwarding.

This IP belongs to Ford Motor.

Multiple requests with identical cookies.

Repeated requests for the same file or page, indicating an attempt to crack a password or exploit a vulnerability.

The IP was noted for executing SYN flood attacks, purposefully creating half-open connections to deplete server resources.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

It attempted to create new directories on the SSH server.

A large number of requests from a single user agent, suggesting an automated process.

The IP address attempted to login to the FTP server with an invalid username.

It attempted to use the FTP server to distribute zombie network tools.

This IP belongs to AT&T.

The IP was flagged for attempting dictionary attacks on our user accounts.

This IP belongs to Cox Communications.

This IP belongs to Hong Kong Broadband Network.

This IP belongs to CenturyLink.

The IP attempted to perform ARP Spoofing attacks on the Apache server.

This IP belongs to Lowe's.

This IP belongs to Exxon Mobil.

It attempted to use the Postfix server to relay malware-infected attachments to other servers.

The IP attempted to delete directories on the SSH server.

This IP belongs to Fannie Mae.

It attempted to use the FTP server to distribute hacking tools.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.