It attempted to perform SQL injection attacks through the Apache server.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

It attempted to login to the Postfix server with an invalid password.

This IP belongs to AmerisourceBergen.

Multiple requests with the same If-None-Match header.

It attempted to use the SASL server to distribute malware.

The IP attempted to change file permissions on the SSH server.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

This IP belongs to Globe Telecom.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

This IP belongs to WordPress.com.

It made multiple requests with the same If-None-Match header.

Multiple failed login attempts using different usernames.

A sudden increase in the number of new user accounts, which can indicate an attacker has gained access and is creating backdoor accounts.

The IP was involved in a FTP Fuzzing attack, sending random or malformed data to the FTP server to cause a crash or reveal vulnerabilities.

It attempted to send emails from the Postfix server to email addresses that have previously marked emails from the server as spam.

The IP attempted to perform a Kad network amplification attack on the SSH server.

This IP belongs to MTS (Mobile TeleSystems).

It was responsible for an unusual increase in server CPU usage.

It was discovered illicitly scanning the server for potential vulnerabilities.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

The malicious IP was reported for sending malformed packets to the SIP server, potentially aiming to crash the system.

The IP sought to exploit the SSH-1 CRC32 vulnerability for expansive unauthorized access.