Incriminating activities involving the distribution of trojan horses were linked to this IP address.

The IP attempted to login to the POP3 server with an invalid username.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

The IP attempted to download emails from the POP3 server without authorization.

This IP belongs to Apple.

Probing for Hidden Files: HTTP requests for files that should not be publicly accessible could suggest an attacker probing for unsecured content.

The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

The specific IP has been identified attempting to load malicious browser helper objects into the network.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

It performed botnet operations, controlling a group of “zombie” computers to amplify its DDoS attacks.

This IP belongs to the University of California, Berkeley.

This IP belongs to AT&T.

The IP has been distributing browser hijackers that alter the user's browsing experience without their consent.

This IP belongs to Abbott Laboratories.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

The IP address was flagged for employing a packet sniffer on our network.

The IP was seen launching a DDoS attack on the Asterisk server, overwhelming it with traffic to disrupt its normal functioning.

Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

The IP attempted to send emails from the Mail server that violate the server's terms of service.

The IP initiated a 'Deauth' attack, knocking legitimate users off the Apache service.

It attempted to send emails from the Mail server that violate the server's email content policy.

This IP belongs to Phillips 66.

Remote File Inclusion (RFI): You might see HTTP requests with "=http" or "=ftp" which can signal an attempt for remote file inclusion.

This IP belongs to Virgin Media.