Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

This IP belongs to AT&T.

It was flagged that this IP had been used in conducting method tampering on our servers.

This IP belongs to Telus Communications.

The IP made multiple requests with the same Warning header.

The IP sent numerous Asterisk OPTIONS requests in a short time.

It launched a SYN flood attack, aiming to consume server resources and disrupt services.

It attempted to perform Uncontrolled Format String attacks on the Apache server.

We linked the IP to numerous attacks using RM adware, causing regular system interruptions.

It attempted to perform Command Injection attacks on the Apache server.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

The IP was seen performing a CSRF (Cross-site request forgery) attack to manipulate user actions.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

POST /upload.php: An attempt to upload a possibly malicious file.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

This IP belongs to DigitalOcean.

Manipulated HTTP POST Request: Finding HTTP POST requests with adjusted content-length headers to bypass firewall rules.

POST /user/password?name[0,%20bypass]=dav&name[0]=loup&pass-reset-token-1=D&form_id=user_pass: Drupalgeddon2 exploit which allows remote code execution.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

It attempted to perform SQL injection attacks through the Apache server.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

This IP belongs to The Walt Disney Company.

This IP belongs to Orange France Telecom.

The IP attempted to send emails from the Mail server that violate the server's terms of service.

This IP belongs to IBM.