This IP belongs to CVS Health.

This IP belongs to UnitedHealth Group.

It attempted to use the FTP server to distribute virus creation tools.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

The IP attempted to execute unauthorized commands on the SSH server.

It initiated the use of spambots, sending out large amounts of unsolicited mails from our server.

Unusual Cookie Data: Logs show modified cookie data, usually encrypted or base64 encoded, suggestive of a session stealing or poisoning attack.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

This IP addressed employed a method of brute force attack attempting to compromise our systems.

This IP belongs to Liberty Mutual Insurance Group.

The IP sent malformed VOIP requests, potentially indicating an attempt to crash the server.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.

The IP was involved in a brute force attack on the FTP server, systematically guessing usernames and passwords to gain unauthorized access.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

It attempted to perform Unvalidated Redirects and Forwards attacks on the Apache server.

The IP attempted to send emails from the IMAP server without authorization.

This IP belongs to Google Cloud Services.

Unusual system or application errors related to authentication or access controls.

It attempted to perform Web Service attacks on the Apache server.

The IP used a 'Poodle' attack in attempts to downgrade the server's SSL to a more vulnerable state.

It attempted to perform XML Entity Expansion attacks on the Apache server.

This IP belongs to Best Buy.

It attempted to use the Postfix server to relay malware-infected attachments to other servers.

GET /internal/: Browsing an internal directory.