It attempted to make unauthorized calls using the Asterisk server.

The IP attempted to send emails from the Mail server that violate the server's terms of service.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

This IP belongs to Lowe's.

It attempted to perform Insecure Direct Object References attacks on the Apache server.

Distributed session hijackers from the IP were designed to capture and exploit web browser sessions.

Attempts to use default or common usernames and passwords, a common tactic in brute force attacks.

It attempted to flood the SIP server with REGISTER requests.

It made multiple requests with the same X-Wap-Profile header.

Unusual increase in network bandwidth usage.

This IP belongs to Oracle.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

This IP belongs to Amazon.

The IP attempted to use the FTP server to distribute DDoS attack tools.

It attempted to perform a Quake Network Protocol amplification attack on the SSH server.

This IP belongs to Amazon.

This IP belongs to The Walt Disney Company.

Repeated failed attempts to access application interfaces or ports that are typically not open to the public.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

The IP attempted to perform Session Replay attacks on the Apache server.

Multiple failed attempts to use the server’s API.

The IP made multiple requests with the same If-Range header.

This IP belongs to Johnson & Johnson.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

It showed unusual activity in the server's error logs.