Too Many Request Timeouts: An abnormal amount of request timeouts might suggest an ongoing Slowloris attack.

Conducted various IP scans, seeking loopholes in our network's security.

It attempted to use the SSH server as a proxy for other malicious activities.

This IP belongs to Bell Canada.

Login attempts at unusual times (e.g., in the middle of the night).

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

This IP gave off a red flag for hosting a hidden command and control server for malicious bots.

The IP launched HTTP tunnel attacks, attempting to wrap other protocols in HTTP to bypass network filters.

This IP was involved in a Remote File Inclusion (RFI) attack, exploiting a vulnerability to execute malicious scripts from a remote server.

The IP attempted to perform a Nestea attack on the SSH server.

This IP belongs to Boeing.

Finally, the IP was caught in the act of Abandoned Object attacks, creating objects with no reference to exhaust memory space

Connection Timeout Abuse: Logs illustrating excessive requests that aim to use up server connections.

Repeated failed attempts to access application interfaces or ports that are typically not open to the public.

Multiple requests with the same TE (Transfer Encoding) header.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

It attempted to login to the SASL server with an invalid password.

This IP belongs to Baidu.

It attempted to use the FTP server to distribute brute force tools.

It attempted to delete directories on the FTP server.

This IP has been observed spreading mobile malware, targeting our company application users.

It repetitively attempted Port Scanning to identify open ports and related vulnerabilities.

It made multiple requests with the same Range header.

The IP attempted to execute an intruder software, terrifying users with unwanted content.