Manipulated HTTP POST Request: Finding HTTP POST requests with adjusted content-length headers to bypass firewall rules.

The IP address initiated multiple unsuccessful login attempts.

POST /user/register: An attempt to register a new user or brute force the user registration form.

The IP engaged in a mail relay attack, using our server to send spam.

This IP belongs to State Farm Insurance.

This IP belongs to Microsoft Azure.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

The IP attempted to inject malicious scripts into the server hoping it would get executed.

This IP belongs to Travelers Cos.

The IP initiated a 'Deauth' attack, knocking legitimate users off the Apache service.

This IP belongs to United Technologies.

This IP addressed employed a method of brute force attack attempting to compromise our systems.

WAF Bypassing Attempts: Requests with suspicious payloads designed to bypass Web Application Firewalls.

This IP belongs to Linode.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

It sent VOIP requests to non-existent extensions.

The IP attempted to use the Mail server to relay phishing emails to other servers.

The IP sent numerous SIP OPTIONS requests in a short time.

The IP attempted to create new directories on the FTP server.

Inclusion of Binary Data in HTTP Request: If binary data is included in the HTTP request, this could suggest an attacker is attempting a binary exploit.

This IP belongs to Vodafone.

This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

Multiple requests with the same X-Csrf-Token header.

The IP attempted to bypass the SASL server's authentication mechanism.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.