This IP belongs to AmerisourceBergen.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

We observed the IP distributing harmful document tracking tools.

The reported IP was identified as a BadBot, engaging in harmful activities such as unauthorized web scraping and data mining.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

This IP belongs to Walmart.

Excessive traffic from a single IP address.

It attempted to flood the SIP server with REGISTER requests.

Multiple requests with the same Proxy-Connection header.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

GET /backup.sql: Attempting to access a backup of your database.

GET /wp-config.php~: Requesting the backup files which may expose sensitive information.

The IP made multiple requests with the same Origin header.

The IP tried to execute Malware/Ransomware attacks via mail attachments.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

This IP belongs to AT&T.

The IP was involved in a rapid sequence of login attempts.

This IP belongs to Vkontakte.

This IP belongs to Boeing.

Multiple requests with the same Referer header.

It was identified as a BadBot, a type of bot that performs malicious activities.

Requests to non-existent endpoints (indicating potential reconnaissance activity).

The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

It attempted multiple LDAP injection attacks to gain unauthorized access.

It attempted logins using outdated protocols.