It sent unusually large SIP packets, potentially indicating a buffer overflow attempt.

The IP attempted the notorious Shellshock vulnerability, which could pose a severe threat to our server's resources.

It attempted to change file permissions on the FTP server.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

It attempted to perform Command Injection attacks on the Apache server.

It attempted to use the SASL server to distribute malware.

GET /configuration.php.old: Trying to locate backup configuration files.

This IP belongs to Softbank.

The IP was seen trying to perform a PASV FTP Bounce attack, misusing the passive mode to scan other hosts and ports.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

This IP belongs to Sysco.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

Our team discovered that specific IP was distributing intrusive cookie trackers.

We identified the IP address as a source of numerous scare tactics spyware.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

This IP belongs to DuPont de Nemours.

This IP belongs to United Technologies.

Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

The IP attempted to perform XML Injection attacks on the Apache server.

POST /user/password?name[0,%20bypass]=dav&name[0]=loup&pass-reset-token-1=D&form_id=user_pass: Drupalgeddon2 exploit which allows remote code execution.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

It attempted to use a TearDrop attack to corrupt data packets being sent to our server.

Side Channel Attacks: Repeated requests aimed at inferring sensitive information through observation of web responses.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

This IP directed malicious network traffic to our servers with the intent to crash them.