It attempted to send emails from the Mail server that violate the server's email content policy.

Signs of Password Spraying: Logs showing single failed login attempt for large numbers of users.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

It launched Smurf Attacks, trying to overload our mail server by utilizing internet host IP network links.

The IP attempted to perform Missing Function Level Access Control attacks on the Apache server.

This IP belongs to KDDI.

The IP initiated a 'Deauth' attack, knocking legitimate users off the Apache service.

GET /cfide/administrator: Looking for misconfigured Adobe ColdFusion admin panel.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

The IP was involved in a war dialing attack, dialing a large number of phone numbers to find modems, fax machines, and unsecured VoIP devices.

It tried to use the email server for bounce spam, of sending out spam to third parties with forged return paths.

The IP attempted to brute force the password to gain mail account access.

This IP belongs to Humana.

POST /login.jsp?user=admin&pass=admin: This could be an attempt to log in as an admin.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

It attempted to perform a Steam protocol amplification attack on the SSH server.

The malicious IP was involved in a Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

This IP belongs to TJX.

It attempted to use the FTP server to distribute phishing emails.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

The IP was seen trying to upload files to the FTP server, possibly with the intent of distributing malware.

The IP address was flagged for employing a packet sniffer on our network.

This IP directed malicious network traffic to our servers with the intent to crash them.