The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

Unusual increase in network bandwidth usage.

GET /index.php?param=: Attempting a cross-site scripting (XSS) attack.

It attempted to perform a brute force attack on the POP3 server.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

Several instances of password stealers were traced back to this notorious IP.

This IP belongs to Intel.

This IP belongs to IBM Cloud Services.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

It attempted to use the FTP server to distribute botnet command and control software.

The IP sent malicious links via IM softwares, aiming to spread instant messaging worms.

The IP attempted to use the FTP server to distribute spam.

The IP address has been involved in distributing adware to our server systems.

The IP was seen trying to exploit known vulnerabilities in the Asterisk server, a common tactic for gaining unauthorized access or control.

Repeated attempts to access directories or files that do not exist or are typically not accessed.

This IP belongs to Shopify.

Attempts to access the server using known malicious IP addresses or domains.

The IP attempted to list the contents of directories that it should not have access to.

This IP belongs to Alibaba Cloud Services.

This IP belongs to Northwestern Mutual.

The IP attempted to perform Format String attacks on the Apache server.

The IP attempted to perform a distributed denial of service attack on the SSH server.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

It attempted to delete emails from the POP3 server without authorization.