It initiated 'HOIC' (High Orbit Ion Cannon) to overload our Apache service with junk data.

Repeated failed attempts to perform actions that require higher privileges.

This IP belongs to Wikimedia Foundation.

This IP belongs to PepsiCo.

The IP attempted to exploit known vulnerabilities in the Asterisk protocol.

Side Channel Attacks: Repeated requests aimed at inferring sensitive information through observation of web responses.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

This IP belongs to McKesson.

Attempts to access the server using known malicious IP addresses or domains.

A high number of unsuccessful SSH logins, a common target for brute force attacks.

The IP address attempted to exploit known vulnerabilities in the Apache server software.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

The IP made multiple requests to the password reset page.

It attempted to send emails with deceptive subject lines from the Postfix server.

This IP belongs to Verizon Communications.

FTP Over HTTP: Logs may show HTTP requests containing FTP commands, potentially indicating an FTP Injection attack.

High Frequency POST Requests: Numerous or unusual POST requests in a short time span could indicate a dictionary or brute force attack on a login page.

Damaging activities showing connections to rootkit attacks were associated with this IP.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

The IP attempted to perform a distributed denial of service attack on the SSH server.

This IP belongs to Target.

The IP attempted to exploit a mail server's greylisting functionality to bypass spam filters.

The IP has been traced back to system monitors, aiming to watch and record user activity.

It attempted to perform a phishing attack using the IMAP server.