It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

The IP exhibited unusual patterns in the Accept-Language header.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

It attempted to login to the SSH server with an invalid password.

The IP address attempted delivering malicious packets to disrupt the system's operation.

Unusual system or application errors related to authentication or access controls.

It attempted to send phishing emails from the Postfix server.

This IP belongs to Reliance Jio.

The IP has initiated several exploits, specifically for software vulnerabilities.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

The IP attempted to execute unauthorized commands on the SSH server.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

Signs of Password Spraying: Logs showing single failed login attempt for large numbers of users.

This IP belongs to SingTel.

The IP was detected attempting to skirt our system's detection through spoofing.

Participated in a botnet attack to overwhelm our server’s resources.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.

Multiple requests with the same Via header.

This IP belongs to Citigroup.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

Multi-step Attacks: Finding HTTP requests that only make sense if earlier requests succeeded or prepared the way.

Multiple requests with the same Max-Forwards header.