This IP was caught distributing malicious APK files.

This IP was accused of multiple unauthorized removal of security certificates.

Repeated attempts to access rarely used or hidden services on the server.

We linked several cryptojacking attempts, aimed at harnessing our system resources, to this IP.

The IP attempted to perform a SIP Invite Flood on the Asterisk server.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

Attempts to use privileged service accounts outside of their normal usage patterns.

It attempted to perform a Sentinels amplification attack on the SSH server.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

This IP belongs to CHS.

The IP attempted to send emails from the Mail server without proper authentication.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

It attempted to perform a brute force attack on the IMAP server.

This IP belongs to Freddie Mac.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

This IP was distributing rogue security software, misleading users to think their systems are infected.

This IP belongs to The Hartford Financial Services.

It attempted to use the SIP server as a relay for calls to premium-rate numbers.

The IP was marked attempting to use infamous 'Ramnit' malware to steal sensitive Apache server data.

Our firewall recorded intrusion attempts originating from this suspicious IP.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

Distributed session hijackers from the IP were designed to capture and exploit web browser sessions.

This IP belongs to Lowe's.