The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

It attempted to perform WSDL Enumeration attacks on the Apache server.

It was found that the IP had deployed rogue security software in our system.

The IP attempted to use the FTP server to distribute secure deletion tools.

The IP was reported for attempting a Cross-Site Scripting attack, injecting malicious scripts into websites to steal data or disrupt functionality.

Unusual network traffic patterns, such as a high amount of outbound traffic.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

It launched invasive malware to corrupt crucial segments of our server functionality.

It attempted to use the SASL server to distribute malware.

This IP belongs to McKesson.

GET /backup.sql: Attempting to access a backup of your database.

This IP was associated with targeted spear phishing attempts against our senior staff.

The IP attempted to send spam emails from the Postfix server.

Unusual network traffic patterns, such as a high amount of outbound traffic.

This IP belongs to Walgreens Boots Alliance.

The IP attempted to perform a password spraying attack on the SASL server.

This IP belongs to Exxon Mobil.

The IP tried to carry out illegal 'HTTP Request Smuggling' to fool the Apache server.

This IP belongs to Caterpillar.

This IP belongs to State Farm Insurance.

The IP made multiple requests with identical Accept-Encoding headers.

This IP belongs to Microsoft.

It was discovered using our server in an open relay configuration, sending emails from unauthorized domains.