The IP attempted to use the FTP server to distribute child pornography.

The IP was seen performing a CSRF (Cross-site request forgery) attack to manipulate user actions.

It attempted to use the FTP server to distribute virus creation tools.

The IP was seen trying to upload files to the FTP server, possibly with the intent of distributing malware.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

The IP attempted to perform a credential stuffing attack on the POP3 server.

The IP made multiple requests with the same TE header.

It started header injection or email injection attempts, by adding extra data into the headers and confusing the server processes.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

It attempted to upload malicious files to the SSH server.

Web-based Command Injection: Logs indicating command injection attempts via web-based forms or query parameters.

This IP belongs to Hong Kong Broadband Network.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

This IP belongs to Comcast.

The IP attempted to use the FTP server to distribute VPN tools.

The IP attempted to perform SOAP Injection attacks on the Apache server.

This IP belongs to DuPont de Nemours.

Multiple requests to the server's robots.txt file.

This IP addressed employed a method of brute force attack attempting to compromise our systems.

The IP attempted to send emails from the Postfix server without proper authentication.

The IP made multiple requests with the same Proxy-Connection header.

It attempted to perform a Quake Network Protocol amplification attack on the SSH server.