HTTP Request with Large Content-Length: This could potentially indicate a buffer overflow attack where an attacker tries to crash the system by sending more data than it can handle.

It attempted to perform XPath Injection attacks on the Apache server.

It sought to exploit cross-site scripting (XSS) vulnerabilities within our mail service web interface.

It attempted to send phishing emails from the Mail server.

This IP belongs to Pfizer.

The IP attempted to send emails from the Mail server that violate the server's email sending limits.

HTTP Request with Large Content-Length: This could potentially indicate a buffer overflow attack where an attacker tries to crash the system by sending more data than it can handle.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

This IP belongs to Procter & Gamble.

The IP attempted a DLL injection attack, hoping to execute malicious code within our SSH processes.

The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

It made multiple attempts to initiate malicious File Transfer Protocol (FTP) sessions with the Postfix service.

Our team discovered that specific IP was distributing intrusive cookie trackers.

The IP attempted logins at unusual times.

It attempted to perform a SYN flood attack on the SSH server.

It attempted to use the FTP server to distribute brute force tools.

The IP attempted to gain unauthorized access to the Apache server.

Multiple requests with the same Proxy-Authorization header.

The IP attempted to use the FTP server to distribute hacking tutorials.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

The IP targeted our server with PHP Injection attacks to gain access to sensitive data.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

This IP belongs to Canadian Department of Defense.

Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.

It made multiple requests from user agents claiming to be bots.