It attempted to take advantage of misconfigurations in the Apache server.

It was involved in the operation of a REG-Bot, a type of bot that performs automated tasks.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

The malicious IP was seen trying to perform a Replay attack, capturing SIP authentication data and resending it to gain unauthorized access.

It attempted to use the SIP server as a relay for calls to premium-rate numbers.

This IP belongs to Comcast.

The IP made multiple requests to the password reset page.

The IP was caught distributing VoIP crackers to exploit our communication channels.

Repeated connections to the server from unknown or suspicious IP addresses.

The malicious IP was involved in Smurf attacks, amplifying its denial-of-service attack using internet host IP network links.

This IP belongs to Home Depot.

This IP belongs to Comcast.

Multiple requests with the same If-Range header.

Unexpected or unusual patterns in the server logs, such as repeated patterns of failed logins followed by successful logins.

The IP was actively seeking unpatched SSH software in hope of finding exploitable vulnerabilities.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

It attempted to send emails from the Postfix server that violate the server's acceptable use policy.

Multiple requests with the same If-None-Match header.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

The IP attempted to use the FTP server to distribute DDoS attack tools.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

This IP belongs to Prudential Financial.

This IP belongs to Time Warner Cable Internet.

This IP belongs to AmerisourceBergen.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.