The IP attempted to launch Ciphertext attacks, trying to decrypt SSH-encrypted communication.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

This IP belongs to DigitalOcean.

Usage of Obscure HTTP Verbs: Seeing non-standard HTTP methods like DEBUG, PUT, or CONNECT could imply a web-based attack.

It attempted to take advantage of misconfigurations in the Apache server.

The IP engaged in an HTTP Desync attack, misaligning HTTP request and responses to yield SSH vulnerability.

It attempted to perform a credential stuffing attack on the SSH server.

This IP belongs to Reliance Jio.

This IP belongs to Home Depot.

The IP attempted to use the SSH server to relay data to other systems.

The malicious IP was reported for trying to perform a VoIP Phreaking attack, exploiting weaknesses in VoIP systems to make free calls or disrupt services.

The IP attempted to use the FTP server to distribute VPN tools.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

GET /admin: Looking for an unprotected admin page.

It made multiple requests with the same X-Csrf-Token header.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

It attempted to perform a phishing attack using the POP3 server.

The IP made multiple requests with the same Proxy-Authorization header.

It attempted to perform a SSDP amplification attack on the SSH server.

This IP belongs to General Electric.

This IP belongs to JPMorgan Chase.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

The IP showed unusual patterns in session IDs.

This IP belongs to Lowe's.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.