Multiple failed attempts on port 22 (SSH)

It attempted to login to the POP3 server with an invalid password.

The IP attempted to perform a SNMP amplification attack on the SSH server.

The IP address attempted to exploit known vulnerabilities in the Apache server software.

Repeated an harassing calls, many times a day

The IP address initiated multiple unsuccessful login attempts.

The IP was engaged in port scanning, probing the server for open SSH ports.

This IP belongs to Boeing.

Signs of Password Spraying: Logs showing single failed login attempt for large numbers of users.

The IP attempted to mark emails as read on the POP3 server without authorization.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

This IP belongs to PepsiCo.

It was found actively trying to exploit HTTP Response Splitting vulnerabilities to perform further attacks.

The IP attempted to use the FTP server to distribute DDoS attack tools.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

This IP was detected distributing spyware-infected USB drives to our users.

The specific IP has been identified attempting to load malicious browser helper objects into the network.

The IP was seen launching a DDoS attack on the Asterisk server, overwhelming it with traffic to disrupt its normal functioning.

Our firewall recorded intrusion attempts originating from this suspicious IP.

This IP belongs to Walgreens Boots Alliance.

This IP belongs to Pfizer.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

The IP address attempted to register as a SIP user with an invalid username.

Attempts to access sensitive areas of the server, such as the admin page or user account information.