We traced a significant increase in the distribution of malicious fake security software to the reported IP.

It attempted to send emails from the POP3 server without authorization.

The IP attempted to use the FTP server to distribute network mapping tools.

It launched invasive malware to corrupt crucial segments of our server functionality.

Unusual patterns in the Accept-Language header.

This particular IP has been used in advanced persistent threats against our servers.

This IP was caught conducting cookie-poisoning attack.

Multiple requests with the same Proxy-Connection header.

With the introduction of hidden malicious intent, this IP found to be operating masked redirect attacks.

It attempted to perform XML Entity Expansion attacks on the Apache server.

It repeatedly attempted to run server-side injection attacks, trying to execute malicious code on our server.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

It attempted to exploit known vulnerabilities in the SASL protocol.

This IP belongs to Xbox Live.

System logs have traced multiple cases of our servers being bombed with trojans to this IP.

GET /internal/: Browsing an internal directory.

Incidents of privacy-invasive software floating in our network were linked to this IP.

This IP belongs to OVH.

This IP belongs to KDDI.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

This IP belongs to Johnson & Johnson.

It attempted to perform a NTP amplification attack on the SSH server.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.