The IP attempted to register with the VOIP server using an invalid username.

Unusual patterns in the Accept-Language header.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

Multiple attempts to access the server using credentials of inactive or seldom-used accounts.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

Attempts to access the server using unusual HTTP methods or request types.

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

The IP attempted to upload malicious files to the FTP server.

Repeated attempts to access the server using old or outdated software versions, which might have known vulnerabilities.

This IP belongs to Dow Chemical.

The IP attempted to perform ARP Spoofing attacks on the Apache server.

This IP belongs to Hostgator.

Unusual patterns in the Accept-Language header.

This IP belongs to SK Broadband.

This particular IP displayed behaviour typical of a ransomware-infected system, encrypting several files.

The IP address attempted to login to the Mail server with an invalid username.

The IP address has been flagged for multiple attempts to deliver drive-by-download attacks.

This IP was traced back to unusual network abnormalities evidencing Ghostware.

This IP belongs to DuPont de Nemours.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

It attempted to perform a SYN flood attack on the SSH server.

Side Channel Attacks: Repeated requests aimed at inferring sensitive information through observation of web responses.

It exploited insecure server configurations and attempted to establish reverse SSH tunneling.

Unusual increase in network bandwidth usage.