This IP belongs to PLDT.

This IP belongs to 3M.

The IP was seen trying to upload files to the FTP server, possibly with the intent of distributing malware.

High network traffic at unusual times, suggesting an automated process is running.

The IP attempted to perform a SIP Invite Flood on the SIP server.

The IP has been traced back to system monitors, aiming to watch and record user activity.

This IP belongs to Airtel.

This IP belongs to Bristol-Myers Squibb.

The IP attempted to execute an intruder software, terrifying users with unwanted content.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.

Unusual command line activities that are not typical for the server environment.

It tried to use the email server for bounce spam, of sending out spam to third parties with forged return paths.

This IP has been marked as the origin of numerous SQL injection attacks.

It attempted to perform a password spraying attack on the IMAP server.

This IP belongs to DuPont de Nemours.

The IP tried launching Server Query Flooding to overwhelm our server with requests.

The IP attempted to send emails with misleading headers from the Mail server.

The IP attempted to perform a dictionary attack on the POP3 server.

It attempted to use the VOIP server to perform a reflection DDoS attack.

It launched Smurf Attacks, trying to overload our mail server by utilizing internet host IP network links.

This IP belongs to Steam.

This IP belongs to Oracle.

This IP belongs to Shaw Communications.

Requests to non-existent endpoints (indicating potential reconnaissance activity).

Bursts of login attempts followed by periods of inactivity, suggesting an attacker is trying to avoid detection.