Our logs indicated an unusually high traffic volume originating from this IP address.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

It attempted to use the FTP server to distribute virus creation tools.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

It attempted to use a TearDrop attack to corrupt data packets being sent to our server.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

This IP attempted to distribute malicious Javascript files.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

udden increase in account lockouts due to multiple failed login attempts.

It attempted to perform a Sentinels amplification attack on the SSH server.

Multiple requests to the server's robots.txt file.

This IP belongs to Sony Network Communications.

Repeated attempts to upload or execute files, which can indicate an attempt to install malicious software.

This IP belongs to Vodacom.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

A dangerous data surveillance spyware was tied back to this IP.

It was making constant NDR (Non-Deliverable Receipt) or backscatter attacks by generating large amount of invalid email addresses.

This IP belongs to Jabil.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

Unusual system or application errors related to authentication or access controls.

This IP belongs to NTT Docomo.

Multi-step Attacks: Finding HTTP requests that only make sense if earlier requests succeeded or prepared the way.

It performed 'Spectre' attacks, exploiting predictive branching in CPUs to potentially gain sensitive information from the SSH service.