The IP tried creating false server responses hoping to disrupt the SASL service.

This IP belongs to Alphabet.

The IP was involved in a FTP Flood attack, sending a large number of FTP connection requests to overwhelm the server.

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

The IP was involved in distributing malware, infecting systems or networks to steal data, cause damage, or gain unauthorized access.

It attempted to use the IMAP server to relay spam.

It made multiple requests with identical POST parameters.

Repeated Unique 404 Errors: Logs revealing a steady stream of unique 404 errors could suggest a DDoS attack aiming to exhaust storage resources.

This IP belongs to Morgan Stanley.

This IP belongs to Vodafone.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

Excessive traffic from a single IP address.

It continually sought to exploit known vulnerabilities within SSH through crafted packet attempts.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

This IP belongs to Fannie Mae.

Multiple requests with the same TE (Transfer Encoding) header.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

Multiple requests with the same Origin header.

Our system flagged this IP as conducting fraudulent transactions activities.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

A string of malicious e-commerce apps installations were linked to this IP.

The IP attempted to perform a VOIP Hopper scan on the SIP server.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

This IP belongs to Best Buy.