It attempted to exploit known vulnerabilities in the Mail protocol.

Reverse Tabnabbing Attempts: Logs illustrating target="_blank" in URL, which is a sign of reverse tabnabbing attempt.

This IP belongs to Google Cloud Services.

It attempted to perform a Newtear attack on the SSH server.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

This IP belongs to the United States Department of Defense.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

With the introduction of hidden malicious intent, this IP found to be operating masked redirect attacks.

This malicious IP was reported for trying to perform a Symlink attack, creating symbolic links to files outside the FTP server's root directory.

This IP executed mass-probing of various ports to seek vulnerabilities.

System logs have traced multiple cases of our servers being bombed with trojans to this IP.

The IP attempted to use the FTP server to distribute ransomware.

It attempted to download sensitive files from the FTP server.

This IP belongs to Swisscom.

This IP belongs to Vodacom.

We linked the IP to numerous attacks using RM adware, causing regular system interruptions.

It attempted to perform Command Injection attacks on the Apache server.

It made multiple requests with the same X-Requested-With header.

The IP has been distributing browser hijackers that alter the user's browsing experience without their consent.

The IP address was identified sending packets with malicious payloads to our server, trying to exploit potential security holes.

It attempted to send emails from the Mail server to a large number of recipients.

It attempted to make unauthorized calls using the VOIP server.

It made multiple requests with the same X-Wap-Profile header.

Multi-step Attacks: Finding HTTP requests that only make sense if earlier requests succeeded or prepared the way.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.