It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

It launched a Slowloris attack attempting to keep Apache connections occupied by slow HTTP traffic.

Unusual increase in network bandwidth usage.

udden increase in account lockouts due to multiple failed login attempts.

This IP directed malicious network traffic to our servers with the intent to crash them.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

Multiple requests with the same Referer header.

This IP belongs to Canadian Department of Defense.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

The IP attempted to send malware-infected attachments from the Postfix server.

The IP attempted to register as an Asterisk user with no password.

It tried to force its way into a secure admin session by trying to hijack the session's cookies.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

The IP attempted to perform a replay attack on the IMAP server.

POST /ckupload.php,: A threat actor attempting to exploit CKEditor’s file uploader.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

This particular IP has been used in advanced persistent threats against our servers.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

The IP attempted to implement a 'BlueKeep' exploit, leveraging protocol vulnerabilities to execute remote code through SSH network services.

Multiple requests with the same Warning header.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

It attempted to flood the SIP server with REGISTER requests.

This IP belongs to Verizon Communications.

GET /internal/: Browsing an internal directory.