It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

This IP belongs to Mondelez International.

Connection Timeout Abuse: Logs illustrating excessive requests that aim to use up server connections.

This IP belongs to MetLife.

It attempted to perform a Quake Network Protocol amplification attack on the SSH server.

It attempted to exploit known vulnerabilities in the SSH protocol.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.

Our data indicates this IP has performed data breaches by launching phishing attacks.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

It attempted to upload malicious scripts to the Apache server.

This IP belongs to Proximus.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

This IP belongs to AT&T.

It launched a privilege escalation attack aiming to gain unauthorized access with higher-level permissions.

This IP attempted to disrupt our systems through the propagation of worms.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

The IP made multiple requests using uncommon HTTP methods.

This IP belongs to Intel.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

This IP belongs to Twenty-First Century Fox.

This IP belongs to Citigroup.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

It made multiple requests with the same X-Att-Deviceid header.

The IP was seen trying to perform a TDoS (Telephony Denial of Service) attack, flooding the VoIP server with calls to make it unavailable to users.

The malicious IP was identified trying to leverage the Postfix service to send bulk spam emails.