It sent Asterisk requests to non-existent extensions.

The IP address initiated attacks using DDoS, impacting our server response times.

The IP attempted to perform a QOTD amplification attack on the SSH server.

The IP was reported for attempting a Cross-Site Scripting attack, injecting malicious scripts into websites to steal data or disrupt functionality.

It made multiple requests with the same Max-Forwards header.

GET /wp-config.php~: Requesting the backup files which may expose sensitive information.

This IP belongs to Kroger.

The IP was involved in attempts of defacing the Apache server website.

This IP was implicated in attempts to inject ransomware into our systems.

It attempted to perform Race Condition attacks on the Apache server.

Multiple requests with identical request parameters.

This IP belongs to Shaw Communications.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

It attempted to use the VOIP server to perform a reflection DDoS attack.

this ip addi is a scammer

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

Unusual Port Numbers: HTTP requests to unusual port numbers could be a sign of someone probing for an open, vulnerable port.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

This IP belongs to the University of California, Berkeley.

It attempted to send emails from the Mail server that violate the server's usage policy.

Cross-Site Scripting (XSS): Logs show HTTP requests with string "

A multitude of spyware-infected download wrappers were linked to the spotted IP address.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

POST //user/register?element_parents=timezone/timezone/%23value&ajax_form=1&_wrapper_format=drupal_ajax: Drupalgeddon3 exploit, another Drupal remote execution vulnerability.

The IP made multiple requests to the server's robots.txt file.