The malicious IP initiated unauthorized Mail Queue access attempts, impacting mail service efficiency.

This IP belongs to Xbox Live.

Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

Multi-step Attacks: Finding HTTP requests that only make sense if earlier requests succeeded or prepared the way.

We identified the IP address as a source of numerous scare tactics spyware.

The malicious IP was involved in a SQL Injection attack, attempting to manipulate a database for unauthorized access or data theft.

It attempted to use the FTP server to distribute network scanning tools.

It attempted to login to the IMAP server with an invalid password.

The malicious IP was seen trying to perform a Replay attack, capturing SIP authentication data and resending it to gain unauthorized access.

The IP attempted to perform a password spraying attack on the SSH server.

The malicious IP conducted HTTP verb tampering, exploiting varying responses to different HTTP methods.

It attempted multiple LDAP injection attacks to gain unauthorized access.

This IP belongs to Apple.

It tried to manipulate DNS lookup processes, aiming to divert SSH traffic to a malicious destination.

It made multiple requests with the same Expect header.

It attempted to exploit known vulnerabilities in the FTP protocol.

This IP belongs to Pfizer.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

The malicious IP was reported for engaging in port scanning, probing the server for open ports to discover potential vulnerabilities for exploitation.

This IP belongs to Dell Technologies.

This IP belongs to UnitedHealth Group.

The IP was involved in a rapid sequence of login attempts.

This IP belongs to Orange France Telecom.

The IP was seen trying to perform a call transfer to an external number, a potential sign of toll fraud.