The IP was marked attempting to use infamous 'Ramnit' malware to steal sensitive Apache server data.

The IP attempted to use the FTP server to distribute keylogging software.

An alarming frequency of microphone loggers has been traced back to this IP.

Malicious Script Execution: Execution attempts of suspicious scripts or encoded payloads often seen in URI parameters or request bodies.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

This IP belongs to PepsiCo.

The IP attempted to send emails from the Mail server that violate the server's email sending limits.

It attempted to use the FTP server to distribute encryption tools.

This IP belongs to Amazon.

The IP address initiated attacks using DDoS, impacting our server response times.

Frequent password reset requests.

It attempted to perform a NTP amplification attack on the SSH server.

This IP belongs to Berkshire Hathaway.

The IP sent malicious links via IM softwares, aiming to spread instant messaging worms.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

It attempted to perform HTTP Response Splitting attacks on the Apache server.

Conducted various IP scans, seeking loopholes in our network's security.

It attempted to perform Buffer Overflow attacks on the Apache server.

Multiple 5xx Server Error Codes: A high count of server error status codes such as '500 Internal Server Error' may suggest an attacker is probing the server's security.

Attempts to access the server using unusual HTTP methods or request types.

The IP was seen traffic sniffing, trying to spy on and analyse network packets for potential server vulnerabilities.

This IP belongs to Nike.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.

GET /backup.sql: Attempting to access a backup of your database.

The IP initiated clickjacking exploits, causing users to unwittingly perform malicious actions during SSH sessions.