The IP attempted to use the FTP server to distribute steganography tools.

It attempted to login to the POP3 server with an invalid password.

This IP belongs to SingTel.

This IP belongs to Publix Super Markets.

It attempted to perform a SSDP amplification attack on the SSH server.

This IP belongs to Bristol-Myers Squibb.

It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

Multiple login attempts using common or easily guessable passwords (like 'password123', 'admin', etc.).

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

GET /server-status: Often an attempt to check Apache server status.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

This IP belongs to Johnson & Johnson.

This IP belongs to GitHub.

The IP attempted to perform a brute force attack on the SASL server.

This IP belongs to Ford Motor.

This IP belongs to Chevron.

Web shell Upload: Logs may show successful POST requests to server upload functionality, indicating an attempt to upload a malicious web shell.

This IP belongs to Freddie Mac.

It performed 'Spectre' attacks, exploiting predictive branching in CPUs to potentially gain sensitive information from the SSH service.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

The IP attempted to use the FTP server to distribute malware.

Unauthorized Access Attempts to Admin Directories: Repeated HTTP requests to known admin directories.

This IP belongs to FedEx.

This IP belongs to Korea Telecom.