It launched a privilege escalation attack aiming to gain unauthorized access with higher-level permissions.

It established numerous 'doppelganger' domains to mimic our SSH server, aiming to trick users into revealing sensitive data.

The IP launched timing attacks, trying to understand our server timings for potential future exploits.

This IP belongs to Jabil.

This IP was detected initiating zero-day exploit attacks on our system.

It launched a privilege escalation attack aiming to gain unauthorized access with higher-level permissions.

This IP belongs to United Technologies.

It was flagged that this IP had been used in conducting method tampering on our servers.

The IP sent numerous Asterisk OPTIONS requests in a short time.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

This malicious IP was involved in a Clickjacking attack, tricking users into clicking on something different from what the user perceives, potentially leading to confidential information disclosure or takeover of their computer.

Login attempts from foreign IP addresses.

It attempted to perform a Newtear attack on the SSH server.

This IP belongs to Amazon Web Services.

The IP address initiated multiple unsuccessful login attempts.

System logs trace back the distribution of trojans that could allow for remote access to this suspicious IP.

POST /WebResource.axd: Attempting to exploit a known .NET vulnerability.

This IP belongs to Bank of America.

This IP has been identified as running a botnet targeting our server systems with ransomware.

Multiple failed login attempts using different usernames.

This IP belongs to Orange France Telecom.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

The IP attempted to download sensitive files from the Apache server.

This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

The IP was seen trying to perform a PASV FTP Bounce attack, misusing the passive mode to scan other hosts and ports.