It attempted to carry out a dictionary attack on pop3 logins to gain unauthorized access.

Our firewall recorded intrusion attempts originating from this suspicious IP.

This IP belongs to Cigna.

Usage of Obscure HTTP Verbs: Seeing non-standard HTTP methods like DEBUG, PUT, or CONNECT could imply a web-based attack.

This malicious IP was reported for attempting to perform a FTP Phishing attack, creating a fake FTP login page to deceive users into providing their credentials.

This IP belongs to Cigna.

The IP attempted to send emails from the IMAP server without authorization.

This IP belongs to Ford Motor.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

This IP belongs to Pfizer.

This IP belongs to PepsiCo.

Repeated attempts to access the server using insecure or deprecated methods.

This IP belongs to Sony Network Communications.

The IP was reported for attempting a Cross-Site Scripting attack, injecting malicious scripts into websites to steal data or disrupt functionality.

It attempted to perform Server Side Request Forgery (SSRF) attacks on the Apache server.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

It attempted to perform Race Condition attacks on the Apache server.

It attempted to use the FTP server to distribute password recovery tools.

The IP was involved in a FTP Flood attack, sending a large number of FTP connection requests to overwhelm the server.

The IP has initiated several exploits, specifically for software vulnerabilities.

This IP belongs to Korea Telecom.

This IP belongs to Citigroup.

This IP belongs to Anthem.

It initiated various replay attacks, attempting to disrupt the system by re-transmitting legitimate data verbatim.

Repeated attempts to use the same password across multiple accounts.