The IP address attempted to exploit known vulnerabilities in the Apache server software.

The IP attempted to perform a DNS amplification attack on the SSH server.

Multiple requests with the same X-UIDH header.

Uncommon Referer Header: HTTP logs record requests from an uncommon or suspicious 'Referer' header.

Multiple requests with the same DNT (Do Not Track) header.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

This IP belongs to Jabil.

This IP belongs to Northwestern Mutual.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

This IP injected exploit kit into our system, taking advantage of software vulnerabilities.

Unusual activity in the server's error logs.

This IP belongs to NTT Docomo.

This IP belongs to World Fuel Services.

It attempted to use the Postfix server to relay spam to other servers.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

GET /.git/config: Trying to access source code or repository configuration information.

The IP attempted to perform a Kad network amplification attack on the SSH server.

It made various efforts to insert spyware to monitor SSH communications covertly.

It attempted to perform a NTP amplification attack on the SSH server.

It attempted to perform a Sentinels amplification attack on the SSH server.

The IP attempted to use the FTP server to distribute rootkit software.

Unusual network traffic patterns, such as a high amount of outbound traffic.

It appeared to be taking part in SSL Stripping attacks, downgrading secure HTTPS connections to facilitate eavesdropping.

It repeatedly tried to inject malicious script code into the system via appending it to an email body.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.