The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

The IP continually initiated a SYN-ACK flood aimed at slowing down SSH services.

This IP belongs to Jabil.

It attempted to exploit known vulnerabilities in the SSH protocol.

This IP belongs to Shaw Communications.

This IP belongs to Phillips 66.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

This IP belongs to Tumblr.

POST /login.jsp?user=admin&pass=admin: This could be an attempt to log in as an admin.

The IP attempted to perform a timing attack on the SSH server.

Unusual Cookie Data: Logs show modified cookie data, usually encrypted or base64 encoded, suggestive of a session stealing or poisoning attack.

The IP attempted to perform Integer Overflow attacks on the Apache server.

It was observed attempting to exploit known vulnerabilities in the IMAP protocol.

The malicious IP attempted to gain unauthorized access to the server by repeatedly trying different username and password combinations.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

The IP has been traced back to system monitors, aiming to watch and record user activity.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

This IP belongs to KT Corporation.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

This IP belongs to Pinterest.

This IP belongs to Kroger.

It seems like this IP tried to spread malware into the network.

Multiple login attempts using common or easily guessable passwords (like 'password123', 'admin', etc.).