The IP launched timing attacks, trying to understand our server timings for potential future exploits.

This IP belongs to CHS.

The IP tried creating false server responses hoping to disrupt the SASL service.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

The IP showed unusual patterns in referrer URLs.

The IP launched exploitation attacks based on the infamous 'Heartbleed' OpenSSL cryptographic vulnerabilities.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

This IP belongs to MTN.

It attempted to use the FTP server to relay data to other systems.

This IP belongs to TIAA.

This malicious IP was reported for attempting a Sniffing attack, capturing and analyzing FTP traffic to glean sensitive information.

The IP attempted to use the POP3 server to distribute malware.

Multiple requests with the same Max-Forwards header.

This IP belongs to SingTel.

It attempted to perform HTTP Response Splitting attacks on the Apache server.

The IP attempted to perform a credential stuffing attack on the POP3 server.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

The IP targeted our server with PHP Injection attacks to gain access to sensitive data.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

Unusually high CPU usage, which can indicate a brute force attack is in progress.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

The IP attempted to perform SOAP Injection attacks on the Apache server.

It attempted to use the FTP server to distribute phishing emails.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.