It attempted to perform a dictionary attack on the SASL server.

Multiple requests with the same If-Range header.

It partook in location spoofing, making it appear from different locations.

It attempted to use the FTP server to distribute encryption tools.

It started header injection or email injection attempts, by adding extra data into the headers and confusing the server processes.

This IP belongs to Heroku.

It attempted to use the FTP server to distribute SQL injection tools.

The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.

Unusually high number of requests to a specific service or application within the server.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

The IP tried creating false server responses hoping to disrupt the SASL service.

It sent Asterisk requests to non-existent extensions.

The IP address attempted to login to the Mail server with an invalid username.

GET /modules/productpageadverts/uploadimage.php: This is related to a known vulnerability in the Prestashop module productpageadverts.

This IP belongs to Amazon Web Services.

It attempted to exploit known vulnerabilities in the SSH protocol.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

There were several attempts from this IP to manipulate our server DNS records.

The IP attempted to perform a SIP Register Flood on the VOIP server.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

The IP address initiated attacks using DDoS, impacting our server response times.

The IP made multiple requests to the password reset page.

The IP attempted to perform a Bonk attack on the SSH server.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

It attempted to perform a dictionary attack on the SASL server.