The IP made multiple requests with the same Proxy-Connection header.

The IP address attempted to login to the Mail server with an invalid username.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

It was discovered using our server in an open relay configuration, sending emails from unauthorized domains.

It attempted to perform a brute force attack on the POP3 server.

Multiple attempts to access the server using encrypted tunnels or proxies.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.

It initiated insecure direct object references (IDOR) attacks to bypass authorization and directly access SSH resources.

The IP attempted to use the FTP server to distribute VPN tools.

The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.

The IP address initiated multiple unsuccessful login attempts.

This IP belongs to Bank of America.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

The IP was caught trying to overload the server through a Distributed Denial of Service attack.

Damaging activities showing connections to rootkit attacks were associated with this IP.

It attempted to login to the POP3 server with an invalid password.

GET /setup.php: Effort to locate setup files for PHP applications.

The malicious IP was reported for attempting a SIP Proxy attack, using a SIP server to mask its true location and identity.

This IP belongs to Microsoft.

It engaged in a click fraud operation using our server’s communication channels.

The IP was caught attempting to execute heap overflow attacks.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

This IP belongs to British Telecommunications.

udden increase in account lockouts due to multiple failed login attempts.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.