Multiple attempts to access the server using credentials that were previously compromised in a data breach.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

This IP belongs to Comcast.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

This IP belongs to Kraft Heinz.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

Attempted to conduct numerous data harvesting strategies to gather sensitive user data.

It attempted to send emails from the POP3 server without authorization.

It was observed attempting to exploit known vulnerabilities in the IMAP protocol.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

This IP belongs to Ziggo.

Command Injection in Requests: Logs indicate HTTP requests with Unix or Windows command-line instructions.

Attempts to access the server using outdated or insecure protocols, which can indicate an attacker is trying to exploit known vulnerabilities.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

It attempted to use the FTP server to distribute botnet command and control software.

This IP belongs to Baidu.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

It attempted to perform a SIP Register Flood on the SIP server.

We linked the IP to numerous attacks using RM adware, causing regular system interruptions.

The IP made multiple requests with the same TE header.

This IP belongs to General Electric.

Excessive traffic from a single IP address.

It attempted to perform XML Entity Expansion attacks on the Apache server.