It made multiple requests from user agents claiming to be bots.

The IP was linked to numerous attacks using web shells through web servers.

This IP belongs to Walgreens Boots Alliance.

The IP was involved in a FTP Flood attack, sending a large number of FTP connection requests to overwhelm the server.

This IP belongs to UnitedHealth Group.

This IP address from an unusual location has successfully installed malware on our servers.

Server Scanning for Software Version: Influx of HTTP requests attempting to detect software version running on the server.

It attempted to login to the FTP server with an invalid password.

The IP address initiated multiple unsuccessful login attempts.

Repeated failed attempts to perform actions that require higher privileges.

This IP belongs to Dell Technologies.

It made multiple requests with identical Accept-Charset headers.

This IP belongs to Nike.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

The IP was caught distributing VoIP crackers to exploit our communication channels.

This IP belongs to Kroger.

This IP belongs to AT&T.

The IP address attempted to login to the SSH server with an invalid username.

GET //web-console/Invoker: Might be an attempt to access JBoss server's web console for exploitation.

The IP sought to exploit the SSH-1 CRC32 vulnerability for expansive unauthorized access.

This IP belongs to 3M.

Repeated Unique 404 Errors: Logs revealing a steady stream of unique 404 errors could suggest a DDoS attack aiming to exhaust storage resources.

This IP was reported for attempting a Dictionary attack on the VoIP server, systematically entering every word in a dictionary as a password to find the correct one.

Repeated attempts to access rarely used or hidden services on the server.

The IP was flagged for attempting dictionary attacks on our user accounts.