Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.

This IP belongs to Freddie Mac.

This IP belongs to Deutsche Telekom AG.

It attempted to perform a phishing attack using the IMAP server.

This IP belongs to Sony Network Communications.

This IP has been linked to numerous occurrences of spyware distribution within our networks.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.

It attempted to download sensitive files from the FTP server.

Attempted to conduct numerous data harvesting strategies to gather sensitive user data.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

Unusual TCP/IP Headers: Logs reflect HTTP requests with unusual or altered TCP/IP headers, an attempt to confuse or slip through security measures.

The IP sent malicious links via IM softwares, aiming to spread instant messaging worms.

It attempted to use the FTP server to relay data to other systems.

Excessive traffic from a single IP address.

This IP belongs to Northwestern Mutual.

It attempted phishing scams by sending malicious mails through compromised accounts.

Unusual patterns in user agent strings.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

It carried out key logging attempts, hoping to record keyboard inputs during SSH sessions.

45.158.88.70 attempted login requests to my Microsoft account. Incorrect password entered. Was not me.

185.155.97.139 attempted to login to my microsoft account with an incorrect password.

201.29.24.130 attempted to login to my Microsoft account with an incorrect password

Probing for Hidden Files: HTTP requests for files that should not be publicly accessible could suggest an attacker probing for unsecured content.

Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

This IP belongs to FedEx.