It attempted to send emails from the Mail server to a large number of recipients.

This IP belongs to PLDT.

This IP belongs to Best Buy.

It executed directory traversal attempts to access unauthorized directories / folders in our server.

Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

This IP belongs to PepsiCo.

??????? ?? ???? https://kra48a.at/

It attempted to perform a brute force attack on the POP3 server.

This IP belongs to GitHub.

Unusual system or application errors related to authentication or access controls.

The IP attempted to perform a replay attack on the IMAP server.

It exploited insecure server configurations and attempted to establish reverse SSH tunneling.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

Unknown source code changes in our system were linked back to this offensive IP address.

This IP was involved in deploying stealthy credential stealers in our network.

Multiple requests with the same Range header.

This IP belongs to Cigna.

The IP address attempted to exploit known vulnerabilities in the Apache server software.

This IP belongs to Gilead Sciences.

It made multiple requests with the same X-Csrf-Token header.

The IP was detected while sending out malicious spyware-infected emails.

The IP attempted to perform a QOTD amplification attack on the SSH server.

Reverse Tabnabbing Attempts: Logs illustrating target="_blank" in URL, which is a sign of reverse tabnabbing attempt.

The IP attempted to send emails from the Mail server without proper authentication.

Unusually high number of requests to the login page.