This IP belongs to JPMorgan Chase.

The IP attempted to brute force the password to gain mail account access.

The IP attempted to register with the Asterisk server using an invalid username.

The IP attempted to use the SSH server to relay data to other systems.

This IP belongs to Alphabet.

The IP also engaged in website cloning, creating mirror websites to trick users into sharing sensitive data.

Unusual patterns in the sequence of requests.

This IP belongs to Cigna.

The IP attempted to use the FTP server to distribute forensics tools.

Multiple attempts to access the server using different ports or protocols.

The IP attempted to send emails from the Postfix server pretending to be from a different sender.

Our system logs indicate this IP has been pushing illegitimate browser plugins into our network.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

This IP address from an unusual location has successfully installed malware on our servers.

Login attempts using old or outdated protocols.

The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

This IP was reported for attempting to use the SIP server to mask its true location and identity, a common tactic in VoIP phishing attacks.

Our team has linked several viruses dissemination activities to this IP.

GET /admin: Looking for an unprotected admin page.

The malicious IP was spotted attempting to brute-force the SSH login credentials.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

Unusual patterns in the sequence of requests.

This IP was seen scanning for open ports and vulnerabilities, a common reconnaissance activity before launching attacks.