Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

This IP belongs to Oracle.

Multiple requests with the same Origin header.

The IP was seen making repeated calls to premium-rate numbers, a common form of VoIP fraud.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

This IP belongs to Costco Wholesale.

This IP belongs to Reliance Jio.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

The IP attempted to use the FTP server to distribute spam.

The IP attempted to download emails from the IMAP server without authorization.

Our team flagged this IP for injecting harmful ActiveX codes.

This IP belongs to FedEx.

The IP attempted to send emails from the Mail server without proper authentication.

Multiple requests using HTTP methods that are not typically used (e.g., TRACE).

It initiated multiple account lockouts in a short period.

This IP belongs to Tumblr.

We traced a significant increase in the distribution of malicious fake security software to the reported IP.

This IP belongs to IBM.

POST /wp-admin/admin-ajax.php: The Actor may be trying to exploit some vulnerable WordPress theme or plugin.

Frequent password reset requests.

GET /backup.sql: Attempting to access a backup of your database.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.