It attempted to carry out a dictionary attack on pop3 logins to gain unauthorized access.

Unusual increase in server CPU usage.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

The IP attempted to perform a phishing attack using the SASL server.

The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

This IP belongs to Walgreens Boots Alliance.

Attempted to conduct numerous data harvesting strategies to gather sensitive user data.

This IP belongs to GoDaddy.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

Excessive traffic from a single IP address.

Repeated attempts to exploit known vulnerabilities in the server operating system or applications.

Attempts to access the server using outdated or insecure protocols, which can indicate an attacker is trying to exploit known vulnerabilities.

The IP was involved in an Email Spoofing attack, sending emails with a forged sender address, often used in phishing and spam campaigns.

This IP belongs to CVS Health.

The IP was seen attempting a FTP Command Injection attack, inserting malicious commands into legitimate FTP requests.

This IP belongs to Netflix.

Our firewall recorded intrusion attempts originating from this suspicious IP.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

This IP belongs to IBM.

the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

This IP belongs to MetLife.

The IP was seen attempting a SYN Flood attack, overwhelming the server by rapidly initiating a connection but not completing it, thereby consuming server resources.

The IP attempted to use the FTP server to distribute rootkit software.