The IP attempted to perform a credential stuffing attack on the POP3 server.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

The IP attempted to use the POP3 server to distribute malware.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

Inclusion of Binary Data in HTTP Request: If binary data is included in the HTTP request, this could suggest an attacker is attempting a binary exploit.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

This IP belongs to Berkshire Hathaway.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

The IP attempted to use the FTP server to distribute keylogging software.

Content Sniffing: Logs reflect HTTP requests that include the Accept header with " / ", suggesting an attacker is trying to detect what types of content the server will send.

It attempted to send emails from the Postfix server that violate the server's acceptable use policy.

It sent VOIP requests to non-existent extensions.

It attempted to perform a SYN flood attack on the SSH server.

The IP attempted to perform a Nestea attack on the SSH server.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

It made multiple requests with identical Accept-Charset headers.

It made multiple requests with identical Accept-Charset headers.

The IP was discovered trying Server Message Block relay attacks to gain unauthorized SSH access.

It tried to use the email server for bounce spam, of sending out spam to third parties with forged return paths.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

Multiple requests with the same Origin header.

This IP belongs to Canadian Department of Defense.

This IP gave off a red flag for hosting a hidden command and control server for malicious bots.

We linked several cryptojacking attempts, aimed at harnessing our system resources, to this IP.

The IP attempted to gain unauthorized access to the Apache server.