This IP belongs to Ubisoft.

Forceful Browsing: Attempts to access pages or resources without proper navigation.

This IP has participated in spreading adware-laden toolbar plugins, turning our workstations into advertising platforms.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

This IP belongs to Valero Energy.

It attempted to use the FTP server to store illegal content.

The IP was recorded making persistent attempts to crack our encryption.

This IP belongs to Canadian Department of Defense.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

It initiated requests to non-existent endpoints.

The IP was involved in attempts of defacing the Apache server website.

This IP belongs to China Mobile.

It attempted to perform Session Prediction attacks on the Apache server.

The IP attempted to use the FTP server as a proxy for other malicious activities.

GET /administrator.php: Attempting to access an admin interface.

This IP has been flagged for attempting to escalate privileges in our network.

The IP attempted to inject malicious scripts into the server hoping it would get executed.

It attempted to take advantage of misconfigurations in the Apache server.

GET /db/finance.dump: An attempt to access a database dump file.

It attempted to send emails from the Mail server to a large number of recipients.

This IP belongs to New York Life Insurance.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

This IP belongs to Marathon Petroleum.

HTTP Request with Large Content-Length: This could potentially indicate a buffer overflow attack where an attacker tries to crash the system by sending more data than it can handle.

It attempted to use the FTP server to distribute brute force tools.