It attempted to perform a Smurf attack on the SSH server.

This IP belongs to Heroku.

It made multiple requests with the same X-Forwarded-For header.

Command Injection in Requests: Logs indicate HTTP requests with Unix or Windows command-line instructions.

This IP belongs to PepsiCo.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

Path Traversal / URI Encoding Attacks: You might notice HTTP GET requests that include ".." or "%2e%2e" or "%252e%252e", indicating a path traversal attack.

POST /user/register: An attempt to register a new user or brute force the user registration form.

The IP was seen trying to perform a call transfer to an external number, a potential sign of toll fraud.

Multiple requests with identical Accept-Charset headers.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

This IP belongs to SK Broadband.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

It attempted to perform a Chargen amplification attack on the SSH server.

Attempts to access the server using unusual HTTP methods or request types.

TLS Downgrade Attacks: Logs showing repeated attempts to establish non-TLS connections with the server.

Just saw some weirdo address hammering my log files til my brain fuzzed out. Cant figure why its poking at my admin panel like theres free candy inside. Guess ill rerun my backup and babysit the firewall logs till it finally gives up.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

Server actin weird

just noticed in my server logs an odd spate of failed auth attempts coming from a random host last night and im left scratching my head over who might be poking around the backend

sketchey

This IP belongs to Boeing.

The IP was seen engaging in a Slowloris attack, holding as many connections to the target web server open for as long as possible, eventually overloading the server.

The IP tried launching Server Query Flooding to overwhelm our server with requests.

This IP belongs to Northwestern Mutual.