Incidents of privacy-invasive software floating in our network were linked to this IP.

Attempts to access the server using outdated or insecure protocols, which can indicate an attacker is trying to exploit known vulnerabilities.

This IP belongs to Wikimedia Foundation.

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

This IP belongs to FedEx.

It attempted to perform Race Condition attacks on the Apache server.

It attempted to use the FTP server to distribute botnet command and control software.

This IP belongs to DuPont de Nemours.

This IP belongs to DigitalOcean.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

It attempted to perform a dictionary attack on the SSH server.

This IP was caught conducting cookie-poisoning attack.

Signal of DDoS Attacks: Multiple IP addresses sending a significantly high volume of traffic.

GET /cgi-bin/test.cgi: Could indicate the threat actor is trying to exploit older, less secure scripting interfaces.

This IP belongs to GitHub.

It attempted to send emails from the Mail server that violate the server's usage policy.

Requests to non-existent endpoints (indicating potential reconnaissance activity).

This IP belongs to Johnson & Johnson.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

Repeated attempts to access directories or files that do not exist or are typically not accessed.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.

Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

It attempted to perform a dictionary attack on the SSH server.

This IP belongs to General Electric.