The IP attempted to perform Missing Function Level Access Control attacks on the Apache server.

It attempted to use the FTP server to distribute network scanning tools.

This IP belongs to Anthem.

The IP attempted to perform a Bonk attack on the SSH server.

It attempted to perform Web Service attacks on the Apache server.

It made multiple requests with the same Referer header.

This IP belongs to Swisscom.

It attempted to perform Clickjacking attacks on the Apache server.

GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php: request for a file often associated with an outdated version of Composer and phpunit used in a remote code execution attack.

Multiple failed login attempts from the same IP address.

This IP belongs to Orange France Telecom.

Multiple requests with the same X-UIDH header.

The IP initiated fake traffic attacks to manipulate webpage rankings and conduct click fraud.

It attempted to use the SSH server as a proxy for other malicious activities.

Attempts to login using a sequential list of passwords, indicating a possible brute force attack.

This IP was traced back to unusual network abnormalities evidencing Ghostware.

The IP attempted to use the FTP server to distribute malware.

Multiple requests with the same TE (Transfer Encoding) header.

This IP belongs to Tumblr.

It performed botnet operations, controlling a group of “zombie” computers to amplify its DDoS attacks.

Incriminating activities involving the distribution of trojan horses were linked to this IP address.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

A dangerous data surveillance spyware was tied back to this IP.

Directories Traversal Attempts: Logs showing HTTP requests that include ".." or "/.." might illustrate someone's effort to locate or exploit sensitive data.

Unusual increase in network bandwidth usage.