It was identified as a BadBot, a type of bot that performs malicious activities.

Attempts to access the server using stolen or leaked credentials.

This IP belongs to Telus Communications.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

The IP attempted to perform a credential stuffing attack on the IMAP server.

This IP has been observed spreading mobile malware, targeting our company application users.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

This IP belongs to Optus.

It made multiple requests with the same X-Forwarded-For header.

The IP attempted to change file permissions on the SSH server.

GET //web-console/Invoker: Might be an attempt to access JBoss server's web console for exploitation.

The malicious IP attempted to gain unauthorized access to the server by repeatedly trying different username and password combinations.

This IP belongs to Telstra.

The IP attempted to send emails from the IMAP server without authorization.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

This IP belongs to Intel.

It launched SQL injection attempts, to break our server database through poorly secured entry fields.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

This IP belongs to T-Mobile.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

This IP belongs to The Walt Disney Company.

Incidents of privacy-invasive software floating in our network were linked to this IP.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.