This IP belongs to Cisco Systems.

Attempts to use default or common usernames and passwords, a common tactic in brute force attacks.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

The IP attempted to download emails from the POP3 server without authorization.

System logs trace back the distribution of trojans that could allow for remote access to this suspicious IP.

This IP was accused of multiple unauthorized removal of security certificates.

This IP belongs to Intel.

This IP belongs to Dreamhost.

This IP was seen trying to perform a Sniffing attack, capturing and analyzing VoIP traffic to glean sensitive information.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

Executed email spoofing attempts pretending to be a trusted party.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

This particular IP tried to perform an unauthorized system configuration change.

The IP made multiple requests with the same X-UIDH header.

It utilized Web scrapers, automatically harvesting content from our server.

It attempted to exploit known vulnerabilities in the POP3 protocol.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

The malicious IP was spotted attempting to brute-force the SSH login credentials.

This IP belongs to Sony Network Communications.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

Repeated attempts to perform actions that are typically restricted, such as creating or modifying user accounts.

This IP blocked legitimate users by performing IP hijacking.

This IP belongs to Home Depot.