It exploited insecure server configurations and attempted to establish reverse SSH tunneling.

It attempted to use the FTP server to distribute password recovery tools.

Multiple requests with the same If-Match header.

The IP attempted to send emails from the Mail server pretending to be from a different sender.

The IP was engaged in email append attacks, trying to add addresses to an existing email or response mid-transit.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

Multiple attempts to access the server using encrypted tunnels or proxies.

This IP belongs to General Dynamics.

Attempts to use automated scripts or tools for password cracking.

It established numerous 'doppelganger' domains to mimic our SSH server, aiming to trick users into revealing sensitive data.

The IP attempted to perform a DNS amplification attack on the SSH server.

Multiple failed login attempts from the same IP address in a short span of time.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

The IP was seen attempting a FTP Command Injection attack, inserting malicious commands into legitimate FTP requests.

This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.

This IP belongs to Dell Technologies.

It attempted to send emails from the POP3 server without authorization.

The IP attempted to flood the Apache server with requests, in a Denial of Service (DoS) attack.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

The IP was caught attempting to execute heap overflow attacks.

The IP attempted to send emails from the Mail server without proper authentication.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

Executed email spoofing attempts pretending to be a trusted party.

This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.

It attempted to send emails from the Postfix server that violate the server's email content policy.