It made multiple requests with the same X-Requested-With header.

The IP made multiple unsuccessful login attempts to the IMAP server in a short period of time.

This IP belongs to Deere.

The malicious IP was involved in a SQL Injection attack, attempting to manipulate a database for unauthorized access or data theft.

The IP was involved in a RTP Bleeding attack, exploiting vulnerabilities in the VoIP server to listen to ongoing calls.

The IP attempted to perform a dictionary attack on the IMAP server.

The IP made multiple requests to the password reset page.

The IP made numerous attempts at SMTP Relay abuse by trying to send emails not meant for or from local users.

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

This IP belongs to Kraft Heinz.

It attempted to perform a SYN flood attack on the SSH server.

This IP belongs to Cloudfare.

It sent VOIP requests to non-existent extensions.

This IP was caught conducting cookie-poisoning attack.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

Unusual increase in network bandwidth usage.

The IP tried creating false server responses hoping to disrupt the SASL service.

This IP executed mass-probing of various ports to seek vulnerabilities.

It attempted to flood the VOIP server with REGISTER requests.

It attempted to exploit known vulnerabilities in the SASL protocol.

Our team flagged this IP for injecting harmful ActiveX codes.

Numerous requests for non-existent pages, suggesting the attacker is probing for vulnerabilities.

Multiple requests with the same X-Csrf-Token header.

Several cross-site scripting attacks were traced back to this IP.

It tried to force its way into a secure admin session by trying to hijack the session's cookies.