HEAD /: May be part of a larger Reconnaissance.

IP Spoofing: Logs showing HTTP requests with IP ranges that are typically reserved for private networks or an unusual X-Forwarded-For header.

It attempted to create new directories on the SSH server.

The IP was seen trying to perform a Fraggle attack, a type of DDoS attack where the attacker sends a large amount of UDP traffic to a router's broadcast network.

This IP belongs to Publix Super Markets.

Unusual patterns in the Accept-Language header.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

The IP has initiated several exploits, specifically for software vulnerabilities.

It launched a SYN flood attack, aiming to consume server resources and disrupt services.

Attempts to use privileged service accounts outside of their normal usage patterns.

This IP belongs to Nintendo.

It attempted phishing scams by sending malicious mails through compromised accounts.

The IP attempted a DLL injection attack, hoping to execute malicious code within our SSH processes.

This IP belongs to Linode.

Malicious Script Execution: Execution attempts of suspicious scripts or encoded payloads often seen in URI parameters or request bodies.

It attempted to perform a SYN flood attack on the SSH server.

This IP belongs to Freddie Mac.

It attempted to perform a side channel attack on the SSH server.

It attempted to login to the SSH server with an invalid password.

The IP attempted to send emails from the IMAP server without authorization.

Our team flagged this IP for injecting harmful ActiveX codes.

This IP belongs to Ford Motor.

The IP attempted to perform a timing attack on the SSH server.

This IP belongs to America Movil.

It carried out TCP Hijacking, attempting to disrupt existing connections to SSH.