It attempted to exploit known vulnerabilities in the Mail protocol.

This IP belongs to Walgreens Boots Alliance.

It sent Asterisk requests to non-existent extensions.

This IP was found responsible for a session hijacking attempt on our network.

The IP attempted to use the FTP server to distribute zero-day exploit tools.

Multiple requests with the same Proxy-Connection header.

The IP attempted a race condition attack, aiming to execute unwanted sequences in the server.

It initiated requests to non-existent endpoints.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

Suspicious Http Referrer Field: HTTP requests with external referrer headers that usually originate from internal source.

This IP belongs to NetEase.

The IP attempted to use the FTP server as a proxy for other malicious activities.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

The IP attempted to use the POP3 server to distribute malware.

The IP attempted to perform a man-in-the-middle attack on the SASL server.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

Executed email spoofing attempts pretending to be a trusted party.

It attempted to perform a man-in-the-middle attack on the POP3 server.

Multiple requests with the same Expect header.

This IP belongs to Ford Motor.

High network traffic at unusual times, suggesting an automated process is running.

Multiple requests with the same If-None-Match header.

This IP belongs to PepsiCo.

This IP belongs to Comcast.