Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.

This IP belongs to Vodafone.

GET /admin: Looking for an unprotected admin page.

This IP attempted to distribute malicious Javascript files.

This IP directed malicious network traffic to our servers with the intent to crash them.

POST /user/register: An attempt to register a new user or brute force the user registration form.

It attempted to send emails from the Postfix server that violate the server's acceptable use policy.

It was found that the IP had deployed rogue security software in our system.

The IP attempted to use the FTP server to distribute spam.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.

The IP attempted to login to the Postfix server with an invalid username.

It attempted to exploit known vulnerabilities in the Postfix software.

This IP belongs to GoDaddy.

This IP belongs to Shaw Communications.

This IP belongs to Sky Broadband.

This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

Our system blocked an attempted Code Injection attack from this IP.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

GET /administrator.php: Attempting to access an admin interface.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

Multiple requests with the same TE (Transfer Encoding) header.

The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.