This IP belongs to Dreamhost.

The IP attempted to login to the POP3 server with an invalid username.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

It attempted to change file permissions on the FTP server.

It attempted to use the FTP server to distribute web proxy tools.

This IP gave off a red flag for hosting a hidden command and control server for malicious bots.

This IP belongs to Phillips 66.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

It attempted to perform a brute force attack on the POP3 server.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

The IP address was found roaming through the network, scanning for weak spots.

This IP belongs to Archer-Daniels-Midland.

The IP attempted to mark emails as read on the POP3 server without authorization.

A series of active scareware campaigns was traced back to this IP address.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

Multiple requests with the same X-Requested-With header.

This IP belongs to Cardinal Health.

Repeated failed attempts to perform actions that require higher privileges.

This IP belongs to Mondelez International.

This IP was associated with targeted spear phishing attempts against our senior staff.

The IP sent numerous SIP OPTIONS requests in a short time.

This malicious IP was reported for trying to perform a Routed Attack, using the FTP server as a jump point to attack another system.

This IP belongs to SK Broadband.

It attempted to exploit known vulnerabilities in the SSH protocol.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.