This IP belongs to AmerisourceBergen.

Signs of Clickjacking: You might observe layered multiple HTTP requests aiming to trick users into unintended interactions.

The malicious IP tried to brute force its way into the SASL authentication process.

This IP belongs to FedEx.

Login attempts from foreign IP addresses.

It launched Smurf Attacks, trying to overload our mail server by utilizing internet host IP network links.

Unusual network traffic patterns, such as a high amount of outbound traffic.

This IP belongs to Prudential Financial.

This IP belongs to Plusnet.

It attempted to delete emails from the POP3 server without authorization.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

This IP belongs to Deutsche Telecom.

This IP belongs to World Fuel Services.

Manipulated HTTP POST Request: Finding HTTP POST requests with adjusted content-length headers to bypass firewall rules.

It initiated several reverse IP lookup requests, probing for server vulnerabilities.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

Our network security detected the IP spreading malicious macros through document files.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

The malicious IP was involved in a SQL Injection attack, attempting to manipulate a database for unauthorized access or data theft.

The IP launched Ping Flood attacks as a detrimental strategy to overwhelm server resources.

It attempted to delete emails from the IMAP server without authorization.

It attempted to use the FTP server to distribute encryption tools.

The IP attempted to perform a Kad network amplification attack on the SSH server.

This IP belongs to Amazon.

This IP belongs to Phillips 66.