The IP attempted to exploit a mail server's greylisting functionality to bypass spam filters.

This IP belongs to TJX.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

It attempted to perform Unvalidated Redirects and Forwards attacks on the Apache server.

This malicious IP was reported for attempting to perform a FTP Format String attack, exploiting format string vulnerabilities to crash the FTP server or execute arbitrary code.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

This malicious IP was reported for attempting a man-in-the-middle attack on the VoIP server, intercepting and potentially altering communication.

This IP belongs to Caterpillar.

It attempted to perform a credential stuffing attack on the SSH server.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

Attempts to use automated scripts or tools for password cracking.

It attempted to perform a SYN flood attack on the SSH server.

It attempted to perform a Chargen amplification attack on the SSH server.

This IP belongs to CHS.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

It made multiple requests from user agents claiming to be bots.

It attempted to perform Insecure Direct Object References attacks on the Apache server.

This IP belongs to UnitedHealth Group.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

The IP was flagged for attempting dictionary attacks on our user accounts.

This IP belongs to American Express.

Multiple attempts to access the server using credentials of inactive or seldom-used accounts.

FTP Over HTTP: Logs may show HTTP requests containing FTP commands, potentially indicating an FTP Injection attack.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

This IP belongs to Baidu.