GET /../htpasswd: Trying to access password files using directory traversal.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.

Remote Execution Attempts: Logs showing unusual terminal commands or scripts run through web access.

This IP belongs to Abbott Laboratories.

The IP was detected while sending out malicious spyware-infected emails.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.

It established numerous 'doppelganger' domains to mimic our SSH server, aiming to trick users into revealing sensitive data.

The IP attempted to perform a credential stuffing attack on the POP3 server.

The IP was involved in a rapid sequence of login attempts.

This IP belongs to Bell Canada.

This IP belongs to Phillips 66.

The IP attempted to perform a distributed denial of service attack on the SSH server.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

This IP has been observed spreading mobile malware, targeting our company application users.

The IP was engaged in port scanning, probing the server for open SSH ports.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

The IP was linked to numerous attacks using web shells through web servers.

This IP was seen trying to perform a SIP Torture attack, sending malformed SIP messages to crash or degrade the performance of the server.

This IP belongs to Northwestern Mutual.

This IP belongs to Sky Broadband.

It attempted to login to the SSH server with an invalid password.

This IP belongs to OVH.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.