Our technical team unearthed the IP's involvement in distributing malicious mobile spyware.

This IP belongs to Philip Morris International.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

This IP belongs to Cisco Systems.

This IP belongs to Nintendo.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

It seems like this IP tried to spread malware into the network.

It appears that this IP was initiating DNSChanger malware attacks on our network.

This IP belongs to Ziggo.

The IP was linked to numerous attacks using web shells through web servers.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

This IP belongs to Gilead Sciences.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

The IP made multiple requests with the same TE header.

The IP attempted to download emails from the POP3 server without authorization.

It attempted multiple LDAP injection attacks to gain unauthorized access.

Because of numerous attacks using malicious mobile code, this IP has been blacklisted.

The IP attempted to use the FTP server to distribute data recovery tools.

The IP attempted to implement a 'BlueKeep' exploit, leveraging protocol vulnerabilities to execute remote code through SSH network services.

This malicious IP was reported for attempting a man-in-the-middle attack on the VoIP server, intercepting and potentially altering communication.

A sudden increase in the number of new user accounts, which can indicate an attacker has gained access and is creating backdoor accounts.