It made multiple requests with the same Expect header.

Multiple requests with the same Expect header.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

System logs trace back the distribution of trojans that could allow for remote access to this suspicious IP.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

The IP set off alarms for an attempted man-in-the-middle attack on our servers.

A series of active scareware campaigns was traced back to this IP address.

The IP attempted to change file permissions on the SSH server.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

Multiple attempts to access the server using credentials that were previously compromised in a data breach.

This IP belongs to Comcast.

The IP was actively seeking unpatched SSH software in hope of finding exploitable vulnerabilities.

The IP actively tried code replacement attacks, swapping legitimate system call addresses with malicious ones.

This IP belongs to Alphabet.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

It attempted to login to the Mail server with an invalid password.

The IP made multiple requests with the same If-Match header.

Multiple requests with the same Referer header.

User-mode rootkits, originating from the particular IP, were causing system instability and crashes.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

This IP belongs to Publix Super Markets.

This IP belongs to IBM.

It attempted to delete emails from the POP3 server without authorization.

This IP belongs to China Mobile.