We linked several cryptojacking attempts, aimed at harnessing our system resources, to this IP.

This IP belongs to Goldman Sachs Group.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.

It attempted to send emails from the POP3 server without authorization.

Multiple failed attempts to use the server’s API.

It attempted to exploit known vulnerabilities in the Mail protocol.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

It attempted to login to the IMAP server with an invalid password.

This IP belongs to OVH.

This IP belongs to Ford Motor.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

Unusual patterns in referrer URLs.

This IP belongs to AT&T.

We traced a significant increase in the distribution of malicious fake security software to the reported IP.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

It established numerous 'doppelganger' domains to mimic our SSH server, aiming to trick users into revealing sensitive data.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

It attempted to perform XPath Injection attacks on the Apache server.

The IP attempted to use the FTP server to distribute secure deletion tools.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

This IP belongs to Ford Motor.

Manipulated HTTP POST Request: Finding HTTP POST requests with adjusted content-length headers to bypass firewall rules.

The malicious IP was reported for engaging in port scanning, probing the server for open ports to discover potential vulnerabilities for exploitation.

This IP exhibited malicious sophistication by employing multi-vector attacks.