This IP belongs to MTS (Mobile TeleSystems).

The IP attempted to use the FTP server to distribute anonymizing tools.

The IP was flagged trying to conduct Denial of Service (DoS) attacks on the Postfix service.

Attempts to use privileged service accounts outside of their normal usage patterns.

The IP attempted to login to the POP3 server with an invalid username.

This IP belongs to Apple.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

This IP belongs to State Farm Insurance.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

GET /../htpasswd: Trying to access password files using directory traversal.

The IP attempted to send spam emails from the Postfix server.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

The IP attempted a race condition attack, aiming to execute unwanted sequences in the server.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.

GET /modules/productpageadverts/uploadimage.php: This is related to a known vulnerability in the Prestashop module productpageadverts.

This IP belongs to Cardinal Health.

It attempted to perform a SIPVicious scan on the Asterisk server.

This IP belongs to FedEx.

It attempted to use the SSH server as a proxy for other malicious activities.

It attempted to perform a SSDP amplification attack on the SSH server.

This IP belongs to Alibaba Cloud Services.

The IP attempted to perform a Kad network amplification attack on the SSH server.

It launched a privilege escalation attack aiming to gain unauthorized access with higher-level permissions.

Multiple requests with the same If-Match header.