It attempted to use the FTP server to distribute terrorist propaganda.

It established numerous 'doppelganger' domains to mimic our SSH server, aiming to trick users into revealing sensitive data.

The IP showed unusual patterns in session IDs.

This IP belongs to Home Depot.

This IP belongs to Microsoft Azure.

This IP belongs to United Continental Holdings.

This IP belongs to The Walt Disney Company.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

This IP has been marked as the origin of numerous SQL injection attacks.

This IP belongs to Target.

The IP engaged in DNS Spoofing, rerouting our server's lookups to a malicious destination.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

It attempted to perform XML Entity Expansion attacks on the Apache server.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

This IP belongs to CVS Health.

Our data indicates this IP has performed data breaches by launching phishing attacks.

GET /solr/admin/cores?wt=json: Trying to exploit Apache Solr servers which have the runExecutableListener enabled.

It attempted to delete emails from the IMAP server without authorization.

This IP belongs to TJX.

It attempted to exploit known vulnerabilities in the FTP protocol.

Unusual Cookie Data: Logs show modified cookie data, usually encrypted or base64 encoded, suggestive of a session stealing or poisoning attack.

The IP was involved in a FTP Injection attack, exploiting vulnerabilities in the FTP server to execute unauthorized commands.

This IP belongs to Verizon Communications.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.