This IP belongs to Xbox Live.

Our technical team unearthed the IP's involvement in distributing malicious mobile spyware.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

The IP address made multiple requests with identical request parameters.

Several instances of aggressive advertising spyware have been linked to this IP.

The reported IP was identified as a BadBot, engaging in harmful activities such as unauthorized web scraping and data mining.

It attempted to send emails from the Postfix server that violate the server's usage policy.

This IP made wrongful manipulations indicating the operation of malicious downgrader.

The IP attempted to perform a Kad network amplification attack on the SSH server.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

The IP attempted to use the SASL server to relay phishing emails.

This IP belongs to Comcast.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

Inclusion of Binary Data in HTTP Request: If binary data is included in the HTTP request, this could suggest an attacker is attempting a binary exploit.

It attempted to perform a SIPVicious scan on the Asterisk server.

Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

It was involved in the operation of a REG-Bot, a type of bot that performs automated tasks.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

This IP belongs to Morgan Stanley.

The IP attempted to use the FTP server to distribute secure deletion tools.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.

The IP made multiple requests with the same Via header.