It attempted to perform a SIPVicious scan on the Asterisk server.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

This IP belongs to Comcast.

This IP belongs to Vodacom.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

It attempted to send emails with deceptive subject lines from the Mail server.

Repeated attempts to use the same password across multiple accounts.

It attempted to login to the IMAP server with an invalid password.

The IP attempted to perform a NetBIOS amplification attack on the SSH server.

Reverse Tabnabbing Attempts: Logs illustrating target="_blank" in URL, which is a sign of reverse tabnabbing attempt.

This malicious IP was seen sending unusually high volumes of requests, a sign of potential automated bot activity.

Attempts to access the server using stolen or leaked credentials.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

This IP belongs to Cigna.

The IP attempted reconnaissance activities, trying to footprint our server’s network.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

System logs trace back the distribution of trojans that could allow for remote access to this suspicious IP.

This IP belongs to Jabil.

It attempted to use the FTP server to relay data to other systems.

This IP belongs to Telefonica Spain.

This IP belongs to Rogers Cable.

Repeated attempts to exploit known vulnerabilities in the server operating system or applications.

This IP belongs to Rogers Cable.

This IP belongs to Dropbox.