Tag malicious TDS activity