Network traffic to AiTM Microsoft 365 phishing panel IP 31.42.184.213

Ibrahim Saud@tektrix

•updated Sep 21, 2026•0•0•4

Detects outbound network connections (HTTP/TLS) from internal hosts to a known malicious IP address associated with Adversary-in-the-Middle (AiTM) phishing infrastructure, specifically targeting Microsoft 365 credential and session cookie theft.