The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

This IP belongs to Humana.

The IP made multiple requests with the same If-Match header.

Several instances of aggressive advertising spyware have been linked to this IP.

Our system flagged this IP as conducting fraudulent transactions activities.

The IP was discovered trying Server Message Block relay attacks to gain unauthorized SSH access.

It attempted to send emails from the Postfix server that violate the server's usage policy.

Reverse Tabnabbing Attempts: Logs illustrating target="_blank" in URL, which is a sign of reverse tabnabbing attempt.

Multiple requests with identical request parameters.

Attempted to employ SSL-bumping for a man-in-the-middle attack to decrypt our secured data.

It attempted to perform Uncontrolled Format String attacks on the Apache server.

The malicious IP was suspected of cryptojacking, illicitly using others' computing resources to mine cryptocurrencies.

This IP belongs to Anthem.

This IP belongs to Pfizer.

This IP belongs to Honeywell International.

Multiple requests with the same Origin header.

It attempted to use the FTP server to distribute network scanning tools.

Multiple requests with the same X-UIDH header.

It attempted to perform a Sentinels amplification attack on the SSH server.

It attempted to download sensitive files from the FTP server.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

The IP attempted to use the FTP server to distribute network mapping tools.

GET /.git/config: Trying to access source code or repository configuration information.

Multiple requests to the server's robots.txt file.

This IP belongs to Citigroup.