This IP belongs to Publix Super Markets.

It attempted to use the Postfix server to relay phishing emails to other servers.

This IP belongs to Valero Energy.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

Multiple 5xx Server Error Codes: A high count of server error status codes such as '500 Internal Server Error' may suggest an attacker is probing the server's security.

This IP belongs to Oracle.

This IP belongs to Massachusetts Mutual Life Insurance.

The IP attempted to perform a Kad network amplification attack on the SSH server.

It attempted to perform a SIP Register Flood on the SIP server.

Server Scanning for Software Version: Influx of HTTP requests attempting to detect software version running on the server.

The IP was involved in a Caller ID Spoofing attack, falsifying the caller ID to deceive the receiver or hide the caller's identity.

It attempted to perform a brute force attack on the IMAP server.

The IP attempted to change file permissions on the SSH server.

This IP belongs to Target.

This IP belongs to PLDT.

The IP attempted to use the POP3 server to distribute malware.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

Server Scanning for Software Version: Influx of HTTP requests attempting to detect software version running on the server.

Unusual increase in server CPU usage.

This IP belongs to Dropbox.

This IP belongs to Apple.

The IP attempted to perform a SIPVicious scan on the VOIP server.

The IP address attempted to login to the IMAP server with an invalid username.

Unexpected HTTP Methods Usage: Frequent HTTP TRACE method attempts could be an attempt to intercept network requests.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.