HTTP Fingerprinting: Sequential requests that aim to identify server software types and version numbers.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

POST /login.jsp?user=admin&pass=admin: This could be an attempt to log in as an admin.

This IP belongs to Alphabet.

It attempted to use the Postfix server to relay malware-infected attachments to other servers.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

This IP belongs to Globe Telecom.

This IP belongs to Alphabet.

The IP was flagged trying to conduct Denial of Service (DoS) attacks on the Postfix service.

Login attempts from foreign IP addresses.

It attempted to perform SQL injection attacks through the Apache server.

This IP was linked to an attempt at distributing malicious software within our system.

Multiple requests with identical cookies.

The malicious IP was reported for attempting a RTP Replay attack, capturing RTP packets and resending them to disrupt communication.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

This IP belongs to Exxon Mobil.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

This IP belongs to Walgreens Boots Alliance.

This IP belongs to Wikimedia Foundation.

The IP attempted to exploit known vulnerabilities in the Asterisk protocol.

It pushed humongous quantities of spam emails through our server, aiming to congest our email services.

The malicious IP was spotted attempting to brute-force the SSH login credentials.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

Attempts to access the server using known malicious IP addresses or domains.

The IP was involved in distributing malware, infecting systems or networks to steal data, cause damage, or gain unauthorized access.