It attempted to login to the Postfix server with an invalid password.

GET /setup.php: Effort to locate setup files for PHP applications.

The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

It attempted to send emails with deceptive subject lines from the Postfix server.

Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

The IP attempted to perform Session Replay attacks on the Apache server.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

GET /cfide/administrator: Looking for misconfigured Adobe ColdFusion admin panel.

This IP was caught conducting cookie-poisoning attack.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

This IP was linked to an attempt at distributing malicious software within our system.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

The IP was seen attempting a FTP Command Injection attack, inserting malicious commands into legitimate FTP requests.

The IP has been distributing browser hijackers that alter the user's browsing experience without their consent.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

Unusual activity in the server's error logs.

This IP belongs to ConocoPhillips.

Multiple requests using HTTP methods that are not typically used (e.g., TRACE).

It performed 'Spectre' attacks, exploiting predictive branching in CPUs to potentially gain sensitive information from the SSH service.

This IP belongs to IBM Cloud Services.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.

Requests to non-existent endpoints (indicating potential reconnaissance activity).

The IP address attempted to exploit known vulnerabilities in the Apache server software.

The IP attempted a Rootkit installation to gain root access and control server activity.