It attempted to perform a phishing attack using the IMAP server.

It attempted to perform a brute force attack on the IMAP server.

GET //web-console/Invoker: Might be an attempt to access JBoss server's web console for exploitation.

This IP belongs to Cigna.

HEAD /: May be part of a larger Reconnaissance.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

It attempted to perform a denial of service attack on the SSH server.

This IP belongs to ConocoPhillips.

The IP made repeated attempts to authenticate with the VOIP server using different usernames.

The said IP was the source of several rootkit deployment attempts.

Multiple failed login attempts using different usernames.

It attempted to perform a man-in-the-middle attack on the IMAP server.

Probing for Hidden Files: HTTP requests for files that should not be publicly accessible could suggest an attacker probing for unsecured content.

It attempted to send emails with malicious links from the Postfix server.

The IP attempted to use the FTP server to distribute secure deletion tools.

Our system flagged this IP as conducting fraudulent transactions activities.

It attempted to perform Local File Inclusion (LFI) attacks on the Apache server.

With the introduction of hidden malicious intent, this IP found to be operating masked redirect attacks.

This IP belongs to Northwestern Mutual.

This IP belongs to Berkshire Hathaway.

The IP attempted to use the Mail server to relay phishing emails to other servers.

This IP belongs to Mondelez International.

It launched a botnet to infiltrate our Apache-DDoS service.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

This IP belongs to Bell Canada.