This IP belongs to The Hartford Financial Services.

The IP was flagged for attempting dictionary attacks on our user accounts.

The IP attempted to use the FTP server to distribute steganography tools.

It attempted to make unauthorized calls using the SIP server.

A high number of unsuccessful SSH logins, a common target for brute force attacks.

It attempted to perform a phishing attack using the POP3 server.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

Multiple requests with identical Accept-Charset headers.

This IP belongs to MTN.

Participated in malicious pranks by altering messages sent through the server.

This IP belongs to Liberty Mutual Insurance Group.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

This IP belongs to Oracle Cloud Infrastructure.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

Spear Phishing Attempts: Rare but possible to find indicators of spear-phishing campaigns targeting your employees or users.

It attempted to perform Race Condition attacks on the Apache server.

The IP attempted to use the SASL server to relay phishing emails.

This malicious IP was reported for attempting to perform a FTP Port Stealing attack, hijacking the data connection of an existing FTP session.

This IP belongs to JPMorgan Chase.

The IP attempted to send emails from the Mail server without proper authentication.

This IP belongs to TIAA.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

It launched a botnet to infiltrate our Apache-DDoS service.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

Login Attempts with Automated User-Agents: Logs reflect requests to login page with 'bot' or 'spider' in user-agent strings.