This IP belongs to United Technologies.

Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.

The IP launched exploitation attacks based on the infamous 'Heartbleed' OpenSSL cryptographic vulnerabilities.

It attempted to take advantage of misconfigurations in the Apache server.

The IP was seen attempting a SYN Flood attack, overwhelming the server by rapidly initiating a connection but not completing it, thereby consuming server resources.

The IP attempted to send malware-infected attachments from the Postfix server.

This IP belongs to Anthem.

The IP engaged in a mail relay attack, using our server to send spam.

It attempted to send emails from the Mail server to a large number of recipients.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

POST /j_security_check: May indicate an attempt to bypass Java server page (JSP) login mechanisms.

The IP made multiple unsuccessful login attempts in a short period of time.

This IP belongs to PepsiCo.

Unusual Port Numbers: HTTP requests to unusual port numbers could be a sign of someone probing for an open, vulnerable port.

The IP address attempted to exploit known vulnerabilities in server software.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

This IP belongs to Steam.

The malicious IP was identified trying to leverage the Postfix service to send bulk spam emails.

This particular IP attempted to exploit vulnerabilities in our web applications.

This IP was distributing rogue security software, misleading users to think their systems are infected.

It attempted to perform a SIP Invite Flood on the VOIP server.

It repeatedly attempted to run server-side injection attacks, trying to execute malicious code on our server.

It attempted to perform a Smurf attack on the SSH server.

This IP belongs to DuPont de Nemours.

GET /errors.log: Shows an actor trying to access server error logs.