Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

This IP belongs to Nike.

It made multiple requests with the same X-Csrf-Token header.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

It tried to execute dictionary attacks on our Mail service causing potential delays.

This IP belongs to Charter Communications.

This IP belongs to Steam.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

GET /db/finance.dump: An attempt to access a database dump file.

This IP belongs to Tech Data.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

It attempted to perform a SSDP amplification attack on the SSH server.

It attempted to use the FTP server to distribute virus creation tools.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

Attempts to access the server using unusual HTTP methods or request types.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

This IP belongs to TELUS Communications.

The IP engaged in a mail relay attack, using our server to send spam.

This IP belongs to TELUS Communications.

The IP exhibited unusual patterns in the Accept-Language header.

This IP was reported for attempting to use the SIP server to mask its true location and identity, a common tactic in VoIP phishing attacks.

It attempted to use the Postfix server to relay emails with misleading headers to other servers.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.

The malicious IP was identified trying to leverage the Postfix service to send bulk spam emails.

It attempted to use the FTP server to distribute traffic monitoring tools.