Usage of Obscure HTTP Verbs: Seeing non-standard HTTP methods like DEBUG, PUT, or CONNECT could imply a web-based attack.

We linked several cryptojacking attempts, aimed at harnessing our system resources, to this IP.

This IP belongs to Caterpillar.

GET /wp-json/wp/v2/users: Trying to extract a list of WordPress users via the REST API.

The IP initiated dictionary attacks, hoping to guess the correct password combination.

The IP made multiple unsuccessful login attempts to the SASL server in a short period of time.

A high number of unsuccessful SSH logins, a common target for brute force attacks.

Multiple login attempts with slight variations in the password, suggesting a dictionary attack, a type of brute force attack.

This IP belongs to Sysco.

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

It attempted to perform a SSDP amplification attack on the SSH server.

Participated in a botnet attack to overwhelm our server’s resources.

This IP belongs to Apple.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

It launched a SYN flood attack, aiming to consume server resources and disrupt services.

The IP attempted to perform SOAP Injection attacks on the Apache server.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

The IP made repeated attempts to authenticate with the Asterisk server using different usernames.

GET /administrator.php: Attempting to access an admin interface.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.

It partook in location spoofing, making it appear from different locations.

The suspicious IP attempted to introduce spyware under the guise of software updates.

Participated in the notorious Water Torture attack to overload our DNS servers.