This IP has participated in spreading adware-laden toolbar plugins, turning our workstations into advertising platforms.

This IP belongs to Valero Energy.

It attempted to use the FTP server to store illegal content.

The IP was recorded making persistent attempts to crack our encryption.

This IP belongs to Canadian Department of Defense.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

It initiated requests to non-existent endpoints.

The IP was involved in attempts of defacing the Apache server website.

This IP belongs to China Mobile.

It attempted to perform Session Prediction attacks on the Apache server.

The IP attempted to use the FTP server as a proxy for other malicious activities.

GET /administrator.php: Attempting to access an admin interface.

This IP has been flagged for attempting to escalate privileges in our network.

It attempted to take advantage of misconfigurations in the Apache server.

GET /db/finance.dump: An attempt to access a database dump file.

It attempted to send emails from the Mail server to a large number of recipients.

This IP belongs to New York Life Insurance.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

This IP belongs to Marathon Petroleum.

It attempted to use the FTP server to distribute brute force tools.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

The IP attempted to perform XML Injection attacks on the Apache server.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

This IP belongs to United Technologies.

The IP attempted to perform Session Hijacking attacks on the Apache server.