The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

The IP made multiple requests with the same TE header.

It attempted to perform HTTP Parameter Pollution attacks on the Apache server.

This IP belongs to Sky Broadband.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

It was found initiating attack vectors to exploit SSH agent forwarding.

It launched a privilege escalation attack aiming to gain unauthorized access with higher-level permissions.

This IP belongs to DigitalOcean.

The IP attempted to perform a SIP Invite Flood on the Asterisk server.

It made multiple requests with identical cookies.

It made multiple requests with identical Accept-Charset headers.

This IP belongs to Telstra.

The IP address attempted to stealthily spread screen scrapers, programs that take screenshots of the user's display.

It utilized a Directory Harvest Attack, attempting to find valid e-mail addresses through guesswork.

GET /wp-config.php~: Requesting the backup files which may expose sensitive information.

The IP address was found roaming through the network, scanning for weak spots.

The IP initiated fake traffic attacks to manipulate webpage rankings and conduct click fraud.

The IP attempted to use the FTP server to distribute VPN tools.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

It made multiple requests with the same Max-Forwards header.

It made multiple requests with the same X-Requested-With header.

The IP address has been marked as the source of RAM scrapers aiming to steal sensitive data.

This IP belongs to PythonAnywhere.

The IP engaged in DNS Spoofing, rerouting our server's lookups to a malicious destination.

The IP made multiple requests with the same If-Range header.