It made multiple requests with the same Range header.

This IP was suspected of running a botnet, a network of compromised computers used for malicious activities like spamming or DDoS attacks.

Multiple login attempts using common or easily guessable passwords (like 'password123', 'admin', etc.).

It attempted to login to the SASL server with an invalid password.

What human rights are being violated in Palestine? Deprivation of the right to self-determination, extrajudicial killings, restrictions on freedom of movement and assembly and illegal settlements were some of glaring manifestations of human rights violations of the Palestinian people see why Israel can kill innocent children with American taxpayer money 1- Because the God of Money of our World is a Jew who supports and lives in Israel. For more details, click on the following link. https://mega.nz/file/FqhzGKbB#bsX4PD-O59HEA0-rynD29xkk47dmddycY5CjZfoDLYg 2- Because https://www.tiktok.com/@thefearlessqueenmel/video/7307640994579680542?lang=en&q=why%20dont%20Americans%20knowl%20what%20you%20have%20seen%20&t=1701880206555 See how innocent children are killed by the most powerful Israeli using American bombs at Al Jazeera Arabic Live at https://www.youtube.com/watch?v=bNyUyrR0PHo if you do not do something such as going on the street and telling your government which is controlled by the Jews to stop killing the Gaza people and stop the Israeli War and send food to the starving people of Gaza. If you can not do it then forward this message with the above two links to at least 4 of your friends and ask them to forward it to 4 of their friends so that the world will know that the new mass murderers are the Jews of the world . It is ironic that the Holocaust servicers (the Jews) are creating a new Holocaust against the Philistines in Gaza. if you do not do this also then you do not have a HART

The IP had been flagged for initiating SYN flood attacks on our servers.

The IP attempted to use the Mail server to relay spam to other servers.

Multiple requests with the same Origin header.

It attempted to perform a NTP amplification attack on the SSH server.

Unusual command line activities that are not typical for the server environment.

Multiple requests with the same Via header.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

This IP was responsible for circulating malicious images masked with spyware.

This IP belongs to DigitalOcean.

Executed numerous SQL injection attacks in an attempt to manipulate the server's databases.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

This IP belongs to World Fuel Services.

It made multiple requests with identical POST parameters.

The IP attempted to change file permissions on the SSH server.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

Attempts to access the server using unusual HTTP methods or request types.

This malicious IP was reported for attempting a FTP Bounce attack, exploiting the FTP protocol's proxy command to scan ports and networks.

The IP attempted to login to the Postfix server with an invalid username.

It attempted to perform a side channel attack on the SSH server.

Unusual increase in network bandwidth usage.