This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

The IP attempted to use the FTP server to distribute steganography tools.

The IP attempted to download emails from the IMAP server without authorization.

This IP belongs to General Motors.

This IP belongs to World Fuel Services.

Frequent password reset requests.

It attempted to send emails from the POP3 server without authorization.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

Attempts to access the server using unusual HTTP methods or request types.

Web-based Command Injection: Logs indicating command injection attempts via web-based forms or query parameters.

The IP attempted to perform Session Fixation attacks on the Apache server.

The IP attempted logins at unusual times.

The IP was involved in a SIP Message Tampering attack, altering SIP messages in transit to disrupt communication or gain unauthorized access.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

Manipulated HTTP POST Request: Finding HTTP POST requests with adjusted content-length headers to bypass firewall rules.

It sent VOIP requests to non-existent extensions.

This IP belongs to Boeing.

The IP was found to be behind numerous fileless malware attacks.

It actively sought to exploit unpatched software within our server applications.

It made multiple requests with the same If-None-Match header.

Print Requests Repeatedly: Logs illustrate HTTP requests with "?print" parameter multiple times, indicating someone trying to expose sensitive information.

This IP belongs to Procter & Gamble.

It attempted to perform SQL injection attacks through the Apache server.

The IP made multiple requests with the same Proxy-Connection header.

This IP belongs to Reliance Jio.