It tried to force its way into a secure admin session by trying to hijack the session's cookies.

This IP belongs to Alibaba Cloud Services.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

The IP attempted to register with the Asterisk server using an invalid username.

Multiple requests with identical Accept-Charset headers.

It was found that the IP has been exploiting zero-day vulnerabilities in our system.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

This IP belongs to British Telecommunications.

This IP belongs to Costco Wholesale.

The IP set off alarms for an attempted man-in-the-middle attack on our servers.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

It attempted to use the FTP server to distribute wireless cracking tools.

This IP belongs to Valero Energy.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

The IP attempted to send spam emails from the Postfix server.

It sent SIP INVITE requests to non-existent extensions.

Rapid sequence of login attempts.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

This IP was traced back to several attempts to access domain admin credentials.

Because of numerous attacks using malicious mobile code, this IP has been blacklisted.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.