The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

This IP belongs to Pfizer.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

The IP address made multiple attempts to exploit a Remote File Inclusion (RFI) vulnerability.

Unexpected HTTP Methods Usage: Frequent HTTP TRACE method attempts could be an attempt to intercept network requests.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

The IP attempted to login to the POP3 server with an invalid username.

The IP attempted to perform a phishing attack using the SASL server.

The IP attempted to send emails from the Mail server that violate the server's email sending limits.

Remote File Inclusion (RFI): You might see HTTP requests with "=http" or "=ftp" which can signal an attempt for remote file inclusion.

Unusual patterns in referrer URLs.

This IP injected exploit kit into our system, taking advantage of software vulnerabilities.

Multiple requests with the same X-Csrf-Token header.

This IP exhibited malicious sophistication by employing multi-vector attacks.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.

This IP belongs to Zayo Bandwidth.

It made numerous requests to the same endpoint in a short time.

Unusual increase in network bandwidth usage.

Participated in the notorious Water Torture attack to overload our DNS servers.

This malicious IP was reported for trying to perform a FTP Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

This IP belongs to Berkshire Hathaway.

It initiated 'HOIC' (High Orbit Ion Cannon) to overload our Apache service with junk data.

This IP belongs to the United States Department of Defense.

This IP belongs to Exxon Mobil.

This IP belongs to Caterpillar.