It attempted to login to the SSH server with an invalid password.

This IP belongs to United Technologies.

It attempted to perform WSDL Enumeration attacks on the Apache server.

It attempted to perform a brute force attack on the IMAP server.

This IP belongs to Lowe's.

It attempted to use the FTP server to distribute password cracking tools.

The IP made multiple requests with the same If-Match header.

The IP attempted to use the FTP server to distribute credit card fraud tools.

The IP was identified as operating a Registration Bot (REG-Bot), automating the creation of multiple fake accounts on various platforms.

This IP was found responsible for a session hijacking attempt on our network.

This IP belongs to FedEx.

This IP belongs to Exxon Mobil.

This IP belongs to Heroku.

The IP attempted to perform a timing attack on the SSH server.

The IP was traced back to stealthy installation attempts of clipboard monitors.

MITM Detection: Detection of duplicate TCP acknowledgements could suggest a Man-in-the-Middle (MITM) attack.

This IP belongs to America Movil.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

It attempted to use the VOIP server to perform a reflection DDoS attack.

This IP belongs to Hong Kong Broadband Network.

The IP attempted to send emails from the Mail server without proper authentication.

It was detected trying to perform cross-site scripting to bypass the same origin policy on Apache.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

The IP was seen trying to upload files to the FTP server, possibly with the intent of distributing malware.