A high number of failed login attempts were detected from a single IP address. This is indicative of a brute force attack attempting to gain unauthorized access to the organization’s internal systems. See MITRE ATT&CK Technique T1110 for Brute Force examples.