The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

It launched invasive malware to corrupt crucial segments of our server functionality.

The IP made multiple requests to the password reset page.

It attempted to move emails to different folders on the IMAP server without authorization.

This particular IP tried to perform an unauthorized system configuration change.

The IP was linked to numerous attacks using web shells through web servers.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

Multiple requests with the same If-Match header.

The IP attempted to use the FTP server as a proxy for other malicious activities.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

The IP attempted to perform a distributed denial of service attack on the SSH server.

It attempted to perform Clickjacking attacks on the Apache server.

This IP belongs to Deere.

Multiple requests with the same Via header.

The malicious IP was reported for sending malformed packets to the SIP server, potentially aiming to crash the system.

It attempted to perform a Land attack on the SSH server.

Unusually high CPU usage, which can indicate a brute force attack is in progress.

This IP belongs to Rogers Cable.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

Login attempts that do not follow typical user behavior patterns.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

It made multiple requests with identical cookies.

This malicious IP was reported for trying to inject malicious scripts into the VoIP server, potentially to disrupt its operation or steal data.

The IP has been caught trying to deliver spyware into our system to compromise sensitive data.