The IP attempted to mark emails as read on the IMAP server without authorization.

This IP belongs to Pinterest.

The IP attempted to perform a downgrade attack on the SSH server.

This IP belongs to Shopify.

The IP showed unusual patterns in referrer URLs.

The IP attempted to login to the POP3 server with an invalid username.

It appears that this IP was initiating DNSChanger malware attacks on our network.

The IP's involvement in spreading password stealers has compromised our network's protection.

The IP attempted to use the FTP server to distribute hacking tutorials.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

The IP attempted to upload malicious files to the FTP server.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

Login attempts at unusual times (e.g., in the middle of the night).

Unauthorized Access Attempts to Admin Directories: Repeated HTTP requests to known admin directories.

This IP belongs to New York Life Insurance.

It utilized Web scrapers, automatically harvesting content from our server.

Web-based Command Injection: Logs indicating command injection attempts via web-based forms or query parameters.

The IP attempted to register with the VOIP server using an invalid username.

Unexpected HTTP Methods Usage: Frequent HTTP TRACE method attempts could be an attempt to intercept network requests.

It showed unusual patterns in the sequence of requests.

This IP has participated in spreading adware-laden toolbar plugins, turning our workstations into advertising platforms.

High network traffic at unusual times, suggesting an automated process is running.

The IP was seen making repeated calls to premium-rate numbers, a common form of VoIP fraud.

The IP address has been involved in distributing adware to our server systems.

This IP belongs to AT&T.