This IP belongs to Sysco.

This IP was traced back to several attempts to access domain admin credentials.

This IP belongs to IBM.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

The IP attempted to perform a VOIP Hopper scan on the SIP server.

It seems like this IP tried to spread malware into the network.

Repeated attempts to exploit known vulnerabilities in server software.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

The IP was reported for attempting a Cross-Site Scripting attack, injecting malicious scripts into websites to steal data or disrupt functionality.

Reverse Tabnabbing Attempts: Logs illustrating target="_blank" in URL, which is a sign of reverse tabnabbing attempt.

This IP was reported for attempting to use the SIP server to mask its true location and identity, a common tactic in VoIP phishing attacks.

The IP attempted to perform a distributed denial of service attack on the SSH server.

The IP attempted to create new directories on the FTP server.

This IP belongs to JPMorgan Chase.

It attempted to perform Session Prediction attacks on the Apache server.

This IP belongs to The Hartford Financial Services.

This IP belongs to Target.

It made multiple requests with the same X-Att-Deviceid header.

It attempted to use the FTP server to distribute traffic monitoring tools.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

POST /wp-admin/admin-ajax.php: The Actor may be trying to exploit some vulnerable WordPress theme or plugin.

This IP belongs to FedEx.

Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.

The IP showed unusual patterns in session IDs.

This IP belongs to World Fuel Services.