The IP attempted to perform a dictionary attack on the IMAP server.

The IP sent numerous SIP OPTIONS requests in a short time.

This IP belongs to Travelers Cos.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

Multiple requests with the same X-Csrf-Token header.

It attempted to use the FTP server to distribute traffic monitoring tools.

It attempted to perform a credential stuffing attack on the SSH server.

GET /etc/passwd: An attempt to retrieve Linux server user account details.

This particular IP tried to perform an unauthorized system configuration change.

It attempted to list the contents of directories that it should not have access to.

It actively sought to exploit unpatched software within our server applications.

It attempted to perform a SYN flood attack on the SSH server.

This IP belongs to Virgin Media.

This IP belongs to Dell Technologies.

By leveraging the AgeTunnel software, the IP attempted to establish a covert channel across the SSH session.

Unusual system or application errors related to authentication or access controls.

It attempted to send emails from the POP3 server without authorization.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

The IP attempted to use the FTP server to distribute credit card fraud tools.

The IP attempted to perform a downgrade attack on the SSH server.

This IP made wrongful manipulations indicating the operation of malicious downgrader.

This IP belongs to BT Central Plus.

Because of numerous attacks using malicious mobile code, this IP has been blacklisted.