The reported IP was identified as a BadBot, engaging in harmful activities such as unauthorized web scraping and data mining.

Multiple Sequential Page Requests: Quick, sequential requests to all pages of a site could be someone scanning for vulnerabilities.

This IP was reported for attempting a Teardrop attack, sending mangled IP fragments with overlapping and oversized payloads to crash the target network device.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

This IP has been marked as the origin of numerous SQL injection attacks.

The IP attempted to inject malicious scripts into the server hoping it would get executed.

It made multiple requests with the same Referer header.

It attempted to perform Session Prediction attacks on the Apache server.

This IP belongs to Archer-Daniels-Midland.

Multiple requests with the same TE (Transfer Encoding) header.

It attempted to perform a man-in-the-middle attack on the SSH server.

GET /db/finance.dump: An attempt to access a database dump file.

Attempted to conduct numerous data harvesting strategies to gather sensitive user data.

Directories Traversal Attempts: Logs showing HTTP requests that include ".." or "/.." might illustrate someone's effort to locate or exploit sensitive data.

It attempted to execute unauthorized commands on the Apache server.

This IP belongs to Gilead Sciences.

The IP was involved in an Email Spoofing attack, sending emails with a forged sender address, often used in phishing and spam campaigns.

The IP attempted to perform a SIP Register Flood on the VOIP server.

The IP address attempted to login to the IMAP server with an invalid username.

Repeated attempts to access directories or files that do not exist or are typically not accessed.

It attempted to perform Unvalidated Redirects and Forwards attacks on the Apache server.

Attempts to access the server using unusual HTTP methods or request types.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

This IP belongs to Caterpillar.