It repetitively attempted Port Scanning to identify open ports and related vulnerabilities.

It conducted an incursion on secure shell (SSH), attempting to tamper with encrypted data.

It attempted to use the FTP server to distribute phishing emails.

The IP made multiple unsuccessful login attempts to the Mail server in a short period of time.

The IP attempted to perform a Bonk attack on the SSH server.

It attempted to carry out a dictionary attack on pop3 logins to gain unauthorized access.

This IP belongs to Amazon.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

Multiple requests with the same X-Csrf-Token header.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

The IP attempted to exploit known vulnerabilities in the VOIP protocol.

It conducted an incursion on secure shell (SSH), attempting to tamper with encrypted data.

It sent Asterisk requests to non-existent extensions.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

This IP belongs to Phillips 66.

This IP belongs to Mondelez International.

This IP belongs to BT Central Plus.

The IP attempted to perform a Kad network amplification attack on the SSH server.

Conducted various IP scans, seeking loopholes in our network's security.

This IP belongs to Bristol-Myers Squibb.

The IP was involved in a FTP Flood attack, sending a large number of FTP connection requests to overwhelm the server.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

An alarming frequency of microphone loggers has been traced back to this IP.