Unusual system or application errors related to authentication or access controls.

This IP belongs to Citigroup.

This IP was linked to an attempt at distributing malicious software within our system.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

Too Many Request Timeouts: An abnormal amount of request timeouts might suggest an ongoing Slowloris attack.

It tried to force its way into a secure admin session by trying to hijack the session's cookies.

It attempted to exploit known vulnerabilities in the SASL protocol.

It attempted to use the FTP server to distribute password cracking tools.

This IP belongs to Boeing.

This IP belongs to SK Broadband.

This IP belongs to Bristol-Myers Squibb.

It launched header-based exploits, attempting to manipulate HTTP headers to cause inappropriate server responses.

This IP belongs to Verizon Communications.

The malicious IP was reported for sending malformed packets to the SIP server, potentially aiming to crash the system.

Several instances of aggressive advertising spyware have been linked to this IP.

This IP belongs to Xbox Live.

The IP was noticed spreading RATs (remote administration tools) camouflaged as regular software.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.

An identity theft activity was linked back to this malicious IP.

This IP belongs to Sprint.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

The IP tried creating false server responses hoping to disrupt the SASL service.

Because of numerous attacks using malicious mobile code, this IP has been blacklisted.

GET /configuration.php.old: Trying to locate backup configuration files.