Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

We discovered attempts from the IP to install rootkit spyware to gain control over our systems.

This IP belongs to GitHub.

This IP belongs to Phillips 66.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

This IP belongs to Telstra.

Our logs indicated an unusually high traffic volume originating from this IP address.

Spike in 401 (unauthorized) or 403 (forbidden) HTTP response codes.

Manipulated HTTP POST Request: Finding HTTP POST requests with adjusted content-length headers to bypass firewall rules.

POST /login.jsp?user=admin&pass=admin: This could be an attempt to log in as an admin.

It made multiple requests with the same Expect header.

It launched SQL injection attempts, to break our server database through poorly secured entry fields.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

Multiple requests with the same TE (Transfer Encoding) header.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

Too Many Request Timeouts: An abnormal amount of request timeouts might suggest an ongoing Slowloris attack.

The IP continually initiated a SYN-ACK flood aimed at slowing down SSH services.

This IP belongs to Plusnet.

This IP belongs to Freddie Mac.

The IP address was identified sending packets with malicious payloads to our server, trying to exploit potential security holes.

The IP made multiple requests with the same Via header.

Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

This IP belongs to the United States Department of Defense.

The IP made multiple requests with the same Warning header.

It attempted to upload malicious files to the SSH server.