This IP belongs to 3M.

This IP belongs to CVS Health.

This IP belongs to Comcast.

The IP attempted to brute force the password to gain mail account access.

The IP attempted to change file permissions on the SSH server.

It made various efforts to insert spyware to monitor SSH communications covertly.

This IP belongs to Ford Motor.

This IP blocked legitimate users by performing IP hijacking.

This IP belongs to IBM Cloud Services.

It attempted to perform a SSDP amplification attack on the SSH server.

The IP was seen trying to upload files to the FTP server, possibly with the intent of distributing malware.

The IP was seen trying to exploit known vulnerabilities in the Asterisk server, a common tactic for gaining unauthorized access or control.

The IP attempted to use the FTP server to distribute DDoS attack tools.

Directories Traversal Attempts: Logs showing HTTP requests that include ".." or "/.." might illustrate someone's effort to locate or exploit sensitive data.

HEAD /: May be part of a larger Reconnaissance.

The malicious IP tried to brute force its way into the SASL authentication process.

GET /wp-login.php: Indicating an attempt to access a WordPress login page.

This IP belongs to IBM.

This IP belongs to Morgan Stanley.

It was making constant NDR (Non-Deliverable Receipt) or backscatter attacks by generating large amount of invalid email addresses.

It was flagged that this IP had been used in conducting method tampering on our servers.

The IP made multiple unsuccessful login attempts to the IMAP server in a short period of time.

It launched a privilege escalation attack aiming to gain unauthorized access with higher-level permissions.

This IP belongs to Tumblr.

Unusual patterns in session IDs.