GET /index.php?param=: Attempting a cross-site scripting (XSS) attack.

The IP address initiated attacks using DDoS, impacting our server response times.

The IP was engaged in email append attacks, trying to add addresses to an existing email or response mid-transit.

the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

The IP was marked trying to carry out Backscatter spam by replying to spam using the server's configuration.

Multiple requests with the same X-Csrf-Token header.

The IP attempted to perform a dictionary attack on the POP3 server.

The IP attempted to perform a downgrade attack on the SSH server.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

This IP belongs to McKesson.

Server Scanning for Software Version: Influx of HTTP requests attempting to detect software version running on the server.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

Multiple requests with the same Proxy-Connection header.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

GET /wp-config.php~: Requesting the backup files which may expose sensitive information.

Unusual patterns in the sequence of requests.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

It attempted to make unauthorized calls using the Asterisk server.

This IP attempted to distribute malicious Javascript files.

The IP attempted to perform a SIP Register Flood on the VOIP server.

This IP belongs to Walmart.

This IP exhibited malicious sophistication by employing multi-vector attacks.

This IP belongs to Linode.

It was identified as a BadBot, a type of bot that performs malicious activities.