Signs of Password Spraying: Logs showing single failed login attempt for large numbers of users.

This IP belongs to Prudential Financial.

This IP belongs to Nike.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

This IP belongs to AmerisourceBergen.

There were several attempts from this IP to manipulate our server DNS records.

We observed the IP distributing harmful document tracking tools.

It attempted to perform a man-in-the-middle attack on the IMAP server.

Excessive Subdomain Requests: A large number of requests for non-existing subdomains could suggest a subdomain takeover attempt.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

It attempted to exploit known vulnerabilities in the SASL protocol.

The IP address attempted to exploit known vulnerabilities in server software.

This IP belongs to Boeing.

Signs of Credential Stuffing: A high number of failed logins could indicate credential stuffing attacks.

This IP made wrongful manipulations indicating the operation of malicious downgrader.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

This IP has been flagged for attempting to escalate privileges in our network.

This IP belongs to Sprint.

GET /wp-json/wp/v2/users: Trying to extract a list of WordPress users via the REST API.

This IP belongs to Alphabet.

The IP was involved in a Caller ID Spoofing attack, falsifying the caller ID to deceive the receiver or hide the caller's identity.

The IP attempted to use the FTP server to distribute DDoS attack tools.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

This IP belongs to Alphabet.

This IP has been marked as the origin of numerous SQL injection attacks.