Our network security detected the IP spreading malicious macros through document files.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

The IP attempted to perform Session Hijacking attacks on the Apache server.

The IP was seen trying to perform a call transfer to an external number, a potential sign of toll fraud.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

This IP belongs to PepsiCo.

Attempts to access the server using credentials that have been involved in previous security incidents.

This IP belongs to MTN.

It attempted to login to the SASL server with an invalid password.

The IP attempted to create new directories on the FTP server.

It attempted to login to the IMAP server with an invalid password.

This IP belongs to Alibaba Cloud Services.

This IP belongs to ConocoPhillips.

This IP belongs to AT&T.

The IP was seen making repeated calls to premium-rate numbers, a common form of VoIP fraud.

It attempted to use the Postfix server to relay phishing emails to other servers.

The IP attempted to perform a SIP Register Flood on the VOIP server.

This IP belongs to United Continental Holdings.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

This IP belongs to CVS Health.

The IP attempted to perform XML Injection attacks on the Apache server.

The IP was caught distributing VoIP crackers to exploit our communication channels.

The IP attempted to delete files from the FTP server.

Bursts of login attempts followed by periods of inactivity, suggesting an attacker is trying to avoid detection.

This IP was detected uploading malicious codes in our network.