POST //user/register?element_parents=timezone/timezone/%23value&ajax_form=1&_wrapper_format=drupal_ajax: Drupalgeddon3 exploit, another Drupal remote execution vulnerability.

It attempted to use the FTP server to distribute web proxy tools.

The IP attempted to perform a credential stuffing attack on the POP3 server.

We linked several cryptojacking attempts, aimed at harnessing our system resources, to this IP.

This IP addressed employed a method of brute force attack attempting to compromise our systems.

This particular IP attempted to exploit vulnerabilities in our web applications.

This malicious IP was reported for trying to intercept VoIP calls, a type of eavesdropping attack aimed at capturing sensitive information.

Multiple requests from user agents claiming to be bots (e.g., Googlebot) that do not match known bot IP ranges.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

Our system flagged this IP as conducting fraudulent transactions activities.

This IP was seen trying to perform a SIP Torture attack, sending malformed SIP messages to crash or degrade the performance of the server.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

It attempted to use the FTP server to distribute SQL injection tools.

The IP was reported for hosting a phishing website, deceiving users into providing their sensitive personal or financial information.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

It attempted to perform Server Side Request Forgery (SSRF) attacks on the Apache server.

It attempted to send emails from the Mail server to a large number of recipients.

This IP was involved in deploying stealthy credential stealers in our network.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

Repeated attempts to exploit known vulnerabilities in server software.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

This IP belongs to Netflix.

The IP address attempted to exploit known vulnerabilities in server software.

The IP attempted to send spam emails from the Postfix server.