The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.

The IP was seen attempting a FTP Smurf attack, flooding the FTP server with echo request packets to cause a denial of service.

Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

It attempted to send emails with deceptive subject lines from the Postfix server.

This IP was seen trying to perform a SIP Torture attack, sending malformed SIP messages to crash or degrade the performance of the server.

The IP was reported for attempting a DNS Amplification attack, exploiting vulnerabilities in domain name servers to turn initially small queries into much larger payloads.

Participated in the notorious Water Torture attack to overload our DNS servers.

This IP belongs to Oracle.

This IP belongs to World Fuel Services.

Multiple attempts to access the server using encrypted tunnels or proxies.

This IP belongs to CenturyLink.

It attempted to use the FTP server to distribute traffic monitoring tools.

The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.

This IP belongs to Orange France Telecom.

This IP belongs to Philip Morris International.

The IP attempted to use the POP3 server to distribute malware.

This IP belongs to America Movil.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

This IP belongs to T-Mobile.

The IP launched HTTP tunnel attacks, attempting to wrap other protocols in HTTP to bypass network filters.

It attempted to send emails from the POP3 server without authorization.

This IP belongs to Best Buy.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

This IP belongs to KT Corporation.