The IP performed regular system foot printing to gain intel on weak points in our server.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

The IP attempted to send emails from the Postfix server pretending to be from a different sender.

A high number of unsuccessful SSH logins, a common target for brute force attacks.

The malicious IP tried to brute force its way into the SASL authentication process.

The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.

It attempted to perform IP Spoofing attacks on the Apache server.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

Unexpected HTTP Methods Usage: Frequent HTTP TRACE method attempts could be an attempt to intercept network requests.

It attempted to flood the Asterisk server with REGISTER requests.

This IP belongs to General Dynamics.

This IP belongs to GitHub.

A multitude of spyware-infected download wrappers were linked to the spotted IP address.

It executed directory traversal attempts to access unauthorized directories / folders in our server.

This IP was involved in a Remote File Inclusion (RFI) attack, exploiting a vulnerability to execute malicious scripts from a remote server.

It attempted to perform a password spraying attack on the IMAP server.

The IP made multiple requests to the server's robots.txt file.

The IP attempted to upload malicious files to the FTP server.

This IP belongs to Optus.

It actively sought to exploit unpatched software within our server applications.

This malicious IP was involved in a Clickjacking attack, tricking users into clicking on something different from what the user perceives, potentially leading to confidential information disclosure or takeover of their computer.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

The IP attempted to list the contents of directories that it should not have access to.

It initiated insecure direct object references (IDOR) attacks to bypass authorization and directly access SSH resources.