Attempts to login using a sequential list of passwords, indicating a possible brute force attack.

This IP belongs to Lockheed Martin.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

This IP belongs to Cisco Systems.

The IP attempted to perform XML Injection attacks on the Apache server.

The IP address initiated multiple unsuccessful login attempts.

A majority of our user base received phishing emails originated from this particular IP address.

A sudden spike in bandwidth usage, which can indicate a brute force attack.

The IP was linked to numerous attacks using web shells through web servers.

This IP belongs to Walgreens Boots Alliance.

The IP made multiple unsuccessful login attempts to the Mail server in a short period of time.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

This IP belongs to Sprint.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

This IP belongs to Deutsche Telekom AG.

This IP belongs to AmerisourceBergen.

Malformed HTTP Version: Observation of logs where HTTP/1.1 or HTTP/2.0 replaced with an unusual alternative to bypass security tools.

It attempted to send emails from the Mail server that violate the server's email content policy.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

The IP was traced back to stealthy installation attempts of clipboard monitors.

Unusual increase in server CPU usage.

The IP attempted to perform Symlink attacks on the Apache server.

This IP belongs to NetEase.

It seems like this IP tried to spread malware into the network.

It made multiple requests with the same If-None-Match header.