Multiple requests with the same Warning header.

Multiple unsuccessful attempts to escalate privileges or access root account.

The IP attempted to perform a credential stuffing attack on the IMAP server.

This IP was accused of multiple unauthorized removal of security certificates.

It attempted to login to the SSH server with an invalid password.

The IP address initiated attacks using DDoS, impacting our server response times.

The IP attempted to perform a BitTorrent amplification attack on the SSH server.

The malicious IP was involved in a SQL Injection attack, attempting to manipulate a database for unauthorized access or data theft.

System logs trace back the distribution of trojans that could allow for remote access to this suspicious IP.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

This IP belongs to Costco Wholesale.

It executed blind command injection, exploiting server inputs to gain unauthorized system control.

The IP address attempted to login to the Mail server with an invalid username.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

The IP actively tried code replacement attacks, swapping legitimate system call addresses with malicious ones.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

The malicious IP was reported for engaging in port scanning, probing the server for open ports to discover potential vulnerabilities for exploitation.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

This IP belongs to Walmart.

The IP attempted to use the FTP server to distribute DDoS attack tools.

Unusual patterns in session IDs.

This malicious IP was involved in a Clickjacking attack, tricking users into clicking on something different from what the user perceives, potentially leading to confidential information disclosure or takeover of their computer.

GET /etc/passwd: An attempt to retrieve Linux server user account details.

The IP attempted a Rootkit installation to gain root access and control server activity.

This specific IP was marked for unauthorized browser changes implying browser hijackers.