The IP attempted to execute unauthorized commands on the SSH server.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

This IP belongs to Ubisoft.

This IP belongs to Kraft Heinz.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

The IP attempted to use the FTP server to distribute ransomware.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

This IP attempted to distribute malicious Javascript files.

It attempted to login to the SSH server with an invalid password.

The IP attempted to perform Missing Function Level Access Control attacks on the Apache server.

It initiated 'HOIC' (High Orbit Ion Cannon) to overload our Apache service with junk data.

A sudden increase in the number of new user accounts, which can indicate an attacker has gained access and is creating backdoor accounts.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

It attempted multiple LDAP injection attacks to gain unauthorized access.

It attempted to perform a credential stuffing attack on the SASL server.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

Attempts to use privileged service accounts outside of their normal usage patterns.

This IP belongs to Microsoft.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

The IP address has been associated with unwanted browser toolbar installations.

The IP made multiple unsuccessful login attempts in a short period of time.

It attempted to use the FTP server to distribute virus creation tools.