The IP tried to initiate DNS tunneling for smuggling data through SSH.

It was found that the IP has been exploiting zero-day vulnerabilities in our system.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

Multiple 5xx Server Error Codes: A high count of server error status codes such as '500 Internal Server Error' may suggest an attacker is probing the server's security.

This IP was found responsible for a session hijacking attempt on our network.

It performed botnet operations, controlling a group of “zombie” computers to amplify its DDoS attacks.

It attempted to send emails from the Postfix server to email addresses that have previously marked emails from the server as spam.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

This IP belongs to Globe Telecom.

The delivery of spyware, aimed at gathering sensitive information, was originated from this IP.

Unusual patterns in user agent strings.

This IP belongs to Fannie Mae.

It attempted to perform Local File Inclusion (LFI) attacks on the Apache server.

Login attempts using old or outdated protocols.

This IP belongs to Walmart.

This IP belongs to Mondelez International.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

Repeated failed attempts to perform actions that require higher privileges.

The IP attempted to register as a SIP user with no password.

It attempted to use the Postfix server to relay emails with malicious links to other servers.

This IP belongs to Honeywell International.

This IP belongs to IBM.

This IP directed malicious network traffic to our servers with the intent to crash them.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.