Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

Multiple requests with identical Accept-Charset headers.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

The IP attempted to perform a SIP Register Flood on the VOIP server.

This IP belongs to Heroku.

The IP attempted to upload malicious files to the FTP server.

This IP belongs to Deere.

The IP attempted to perform DNS Spoofing attacks on the Apache server.

This IP was seen trying to perform a SIP Torture attack, sending malformed SIP messages to crash or degrade the performance of the server.

A sudden surge in the number of requests per second, indicating an automated process.

It was found actively trying to exploit HTTP Response Splitting vulnerabilities to perform further attacks.

Finally, the IP was caught in the act of Abandoned Object attacks, creating objects with no reference to exhaust memory space

It was discovered illicitly scanning the server for potential vulnerabilities.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

It attempted to list the contents of directories that it should not have access to.

This IP belongs to Best Buy.

The IP attempted to change file permissions on the SSH server.

Unusual patterns in referrer URLs.

It attempted logins using outdated protocols.

It attempted to perform a denial of service attack on the SSH server.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

The deceptive IP was sneaking in spyware through clickjacking attacks to manipulate our users.

The IP attempted to send emails from the Mail server to blacklisted email addresses.

It attempted to exploit known vulnerabilities in the FTP protocol.

GET /ELMAH.axd: Attempting to exploit ELMAH (Error Logging Modules and Handlers) misconfiguration in ASP.NET sites.