Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

This IP belongs to Verizon.

It attempted to perform Server Side Request Forgery (SSRF) attacks on the Apache server.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

The IP was seen trying to upload files to the FTP server, possibly with the intent of distributing malware.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

This IP belongs to Cisco Systems.

It launched Smurf Attacks, trying to overload our mail server by utilizing internet host IP network links.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

This IP belongs to Optus.

It attempted to perform a credential stuffing attack on the SSH server.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

It attempted to use the IMAP server to relay spam.

It attempted phishing scams by sending malicious mails through compromised accounts.

It sent Asterisk requests to non-existent extensions.

This IP was traced back to several attempts to access domain admin credentials.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

This IP belongs to United Technologies.

It started header injection or email injection attempts, by adding extra data into the headers and confusing the server processes.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

The IP attempted to list the contents of directories that it should not have access to.

This IP belongs to DigitalOcean.

The IP was involved in attempts of defacing the Apache server website.

It initiated several reverse IP lookup requests, probing for server vulnerabilities.