The IP attempted to perform a QOTD amplification attack on the SSH server.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

This IP belongs to AT&T.

It was identified as a BadBot, a type of bot that performs malicious activities.

The IP attempted a pass-the-hash attack, trying to authenticate without knowing the plaintext password.

It attempted to send emails with deceptive subject lines from the Postfix server.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

The IP attempted to upload malicious files to the FTP server.

High network traffic at unusual times, suggesting an automated process is running.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

It attempted to upload malicious scripts to the Apache server.

The IP attempted to perform Directory Traversal attacks on the Apache server.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

This IP belongs to Alphabet.

It attempted to perform Heap Overflow attacks on the Apache server.

It attempted to perform a SIPVicious scan on the SIP server.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

This IP was responsible for circulating malicious images masked with spyware.

A sudden spike in bandwidth usage, which can indicate a brute force attack.

Repeated attempts to access the server using insecure or deprecated methods.

The IP attempted to login to the Postfix server with an invalid username.