This IP belongs to Bank of America.

It made multiple requests with identical POST parameters.

Finally, the IP was caught in the act of Abandoned Object attacks, creating objects with no reference to exhaust memory space

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

Web shell Upload: Logs may show successful POST requests to server upload functionality, indicating an attempt to upload a malicious web shell.

It attempted to login to the Postfix server with an invalid password.

This IP belongs to Target.

The IP sent malicious links via IM softwares, aiming to spread instant messaging worms.

It initiated insecure direct object references (IDOR) attacks to bypass authorization and directly access SSH resources.

The IP used a 'Poodle' attack in attempts to downgrade the server's SSL to a more vulnerable state.

The malicious IP attempted to exploit server misconfigurations to gain higher-level access.

The IP address attempted to login to the IMAP server with an invalid username.

The IP address has been involved in distributing adware to our server systems.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

Repeated failed attempts to access application interfaces or ports that are typically not open to the public.

The IP was involved in a toll fraud attack, making long-distance calls without authorization, leading to high charges.

The IP made multiple unsuccessful login attempts in a short period of time.

This IP belongs to BT Central Plus.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

It attempted to perform a replay attack on the SASL server.

The IP attempted to perform Session Fixation attacks on the Apache server.

The IP sent malformed Asterisk requests, potentially indicating an attempt to crash the server.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

The IP address attempted to login to the Mail server with an invalid username.

A large number of requests from a single user agent, suggesting an automated process.