This IP belongs to Procter & Gamble.

Unusual TCP/IP Headers: Logs reflect HTTP requests with unusual or altered TCP/IP headers, an attempt to confuse or slip through security measures.

The IP was noticed spreading RATs (remote administration tools) camouflaged as regular software.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

The IP made multiple requests with identical Accept-Encoding headers.

The malicious IP was reported for attempting to manipulate file permissions on the FTP server, potentially to gain unauthorized access or expose sensitive data.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

It attempted to use the FTP server to distribute identity theft tools.

Multiple requests with the same If-Match header.

The IP made multiple requests to the server's robots.txt file.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

It attempted to send emails from the Mail server that violate the server's usage policy.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.

The IP attempted to perform a dictionary attack on the IMAP server.

This IP belongs to Nike.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

This IP belongs to Microsoft.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

It was noticed that the IP has tried illegal attempts of reverse engineering our software.

Our data indicates this IP has performed data breaches by launching phishing attacks.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

This IP belongs to Intel.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

It made multiple requests with the same X-Forwarded-For header.

This IP belongs to Alphabet.