Participated in the notorious Water Torture attack to overload our DNS servers.

This IP belongs to JPMorgan Chase.

Multiple requests from different IP addresses in a short span of time, suggesting a distributed brute force attack.

This IP belongs to Archer-Daniels-Midland.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

This IP belongs to Nintendo.

Repeated attempts to access the server using insecure or deprecated methods.

It carried out key logging attempts, hoping to record keyboard inputs during SSH sessions.

Attempts to use automated scripts or tools for password cracking.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

Unusually high number of requests to the login page.

This IP belongs to Cox Communications.

This IP belongs to Tyson Foods.

This IP has been linked to numerous occurrences of spyware distribution within our networks.

The IP made multiple requests with the same Via header.

It made multiple requests with the same X-Csrf-Token header.

Multiple unsuccessful attempts to escalate privileges or access root account.

Bogus pop-ups irritating our end-users were found to be released by this infamous IP.

Unusual patterns in referrer URLs.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

The IP was actively engaged in spear-phishing attacks, aimed at high-ranking officials within our network.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

The IP attempted to use the FTP server to distribute child pornography.

This IP belongs to Comcast.