The IP tried to execute Malware/Ransomware attacks via mail attachments.

Headless Browser Activity: Logs may show HTTP requests with user-agent strings containing headless browser identifiers.

This IP was traced back to unusual network abnormalities evidencing Ghostware.

This IP belongs to WordPress.com.

The IP address attempted to register as a SIP user with an invalid username.

This IP belongs to Johnson & Johnson.

Participated in a botnet attack to overwhelm our server’s resources.

It made multiple requests with the same Expect header.

POST /admin/upload.php?_upl: An attempt to exploit the JQuery File Upload vulnerability.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

Unusually high number of requests to a specific service or application within the server.

This IP belongs to WordPress.com.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

Finally, the IP was caught in the act of Abandoned Object attacks, creating objects with no reference to exhaust memory space

The IP sent numerous VOIP OPTIONS requests in a short time.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

It attempted to perform a SYN flood attack on the SSH server.

The malicious IP tried to depreciate the reputation of our mail server by sending out numerous spam mails.

This IP belongs to Caterpillar.

It attempted to execute unauthorized commands on the Apache server.

Multiple failed login attempts from the same IP address.

Excessive traffic from a single IP address.

Actively performed packet spoofing, obscuring the origin point of its own malicious packets.

The IP attempted to flood the Apache server with requests, in a Denial of Service (DoS) attack.