This IP belongs to Home Depot.

It attempted to perform Session Sidejacking attacks on the Apache server.

This IP belongs to Heroku.

It attempted to send phishing emails from the Mail server.

It was found that the IP has been exploiting zero-day vulnerabilities in our system.

This IP was involved in a Remote File Inclusion (RFI) attack, exploiting a vulnerability to execute malicious scripts from a remote server.

This IP belongs to Dell Technologies.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

This IP belongs to Costco Wholesale.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

This IP belongs to Phillips 66.

This IP belongs to Sysco.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

The IP has initiated several exploits, specifically for software vulnerabilities.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.

It made multiple requests with the same If-None-Match header.

This IP belongs to Walgreens Boots Alliance.

GET /trace.axd: An attempt to find a debug handler in ASP.NET.

It attempted to use the FTP server to distribute network scanning tools.

This IP belongs to United Parcel Service.

The IP attempted to use the FTP server to distribute network mapping tools.

This IP belongs to Oracle.

The IP attempted to send spam emails from the Postfix server.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.