It initiated requests to non-existent endpoints.

The IP attempted to delete files from the FTP server.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

It attempted to send emails from the Postfix server that violate the server's acceptable use policy.

The IP attempted to send emails from the Mail server without proper authentication.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

GET /wp-json/wp/v2/users: Trying to extract a list of WordPress users via the REST API.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.

Repeated attempts to upload or execute files, which can indicate an attempt to install malicious software.

The IP was seen trying to exploit known vulnerabilities in server software, a common tactic for gaining unauthorized access or control.

Malformed Host Headers: HTTP requests with host headers that do not match the site's actual hostname.

The IP attempted to send spam emails from the Mail server.

This IP belongs to Vodafone.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

This IP belongs to Apple.

The IP attempted to send emails from the Mail server without proper authentication.

The IP attempted to use the FTP server to distribute rootkit software.

It attempted to login to the FTP server with an invalid password.

The IP attempted to use the POP3 server to relay spam.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

This IP belongs to IBM Cloud Services.