This IP belongs to ConocoPhillips.

It sent SIP INVITE requests to non-existent extensions.

Executed email spoofing attempts pretending to be a trusted party.

It showed unusual activity in the server's error logs.

The IP initiated fake traffic attacks to manipulate webpage rankings and conduct click fraud.

It attempted to carry out a dictionary attack on pop3 logins to gain unauthorized access.

It made multiple requests with identical cookies.

Our network security detected the IP spreading malicious macros through document files.

The IP attempted to send emails from the Mail server without proper authentication.

It attempted to perform a phishing attack using the POP3 server.

With the introduction of hidden malicious intent, this IP found to be operating masked redirect attacks.

This IP belongs to Baidu.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

It was observed attempting to exploit known vulnerabilities in the IMAP protocol.

Multiple requests with the same Warning header.

The IP was flagged for performing XML External Entity attacks, exploiting improperly processed XML inputs.

Multiple failed login attempts using different usernames.

It attempted to delete emails from the IMAP server without authorization.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

This IP belongs to Berkshire Hathaway.

It attempted to send emails from the Postfix server that violate the server's email content policy.

It utilized Web scrapers, automatically harvesting content from our server.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

Login attempts using old or outdated protocols.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.