The IP made multiple requests with the same Warning header.

It attempted to send emails from the Postfix server that violate the server's usage policy.

The malicious IP initiated numerous HTTP flood attacks, designed to overwhelm the Apache server with requests.

Multiple requests with the same X-Forwarded-For header.

This IP belongs to Morgan Stanley.

Too Many HTTP 404 Errors: A high number of 404 Page Not Found errors may indicate an attacker trying to find valid directories or pages.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

Content Sniffing: Logs reflect HTTP requests that include the Accept header with " / ", suggesting an attacker is trying to detect what types of content the server will send.

The IP sent malformed Asterisk requests, potentially indicating an attempt to crash the server.

The IP attempted to brute force the password to gain mail account access.

This IP belongs to State Farm Insurance.

Unexpected changes in the server configuration or installed software.

The malicious IP was seen trying to perform a Replay attack, capturing SIP authentication data and resending it to gain unauthorized access.

Multiple requests with the same Referer header.

This IP belongs to Linode.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

It attempted multiple LDAP injection attacks to gain unauthorized access.

This IP belongs to Abbott Laboratories.

The IP was reported for attempting a Cross-Site Scripting attack, injecting malicious scripts into websites to steal data or disrupt functionality.

It attempted multiple LDAP injection attacks to gain unauthorized access.

This IP belongs to Lockheed Martin.

This IP belongs to SingTel.

The malicious IP was reported for attempting to manipulate file permissions on the FTP server, potentially to gain unauthorized access or expose sensitive data.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

This IP belongs to PythonAnywhere.