This IP belongs to Procter & Gamble.

GET /solr/admin/cores?wt=json: Trying to exploit Apache Solr servers which have the runExecutableListener enabled.

The IP was marked trying to carry out Backscatter spam by replying to spam using the server's configuration.

This IP was seen scanning for open ports and vulnerabilities, a common reconnaissance activity before launching attacks.

The IP attempted to use the FTP server to distribute DDoS attack tools.

It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

HEAD /: May be part of a larger Reconnaissance.

This IP was implicated in attempts to inject ransomware into our systems.

Multiple failed login attempts from the same IP address.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

Unusual increase in network bandwidth usage.

The IP attempted to register as an Asterisk user with no password.

This IP belongs to Anthem.

Multiple 5xx Server Error Codes: A high count of server error status codes such as '500 Internal Server Error' may suggest an attacker is probing the server's security.

The IP address has been flagged for multiple attempts to deliver drive-by-download attacks.

The IP sent malformed VOIP requests, potentially indicating an attempt to crash the server.

This IP belongs to Telkom SA.

This IP was detected initiating zero-day exploit attacks on our system.

This malicious IP was reported for attempting a FTP Spoof attack, falsifying its IP address to bypass IP-based access controls on the FTP server.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

The IP address attempted to exploit known vulnerabilities in server software.

This IP belongs to General Motors.

The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

This IP has been flagged for attempting to escalate privileges in our network.