Our system logs indicate this IP has been pushing illegitimate browser plugins into our network.

The IP attempted to perform a dictionary attack on the POP3 server.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

This IP belongs to KDDI.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

This IP belongs to WordPress.com.

Repeated requests for the same file or page, indicating an attempt to crack a password or exploit a vulnerability.

Our team has linked several viruses dissemination activities to this IP.

The IP was detected while sending out malicious spyware-infected emails.

The IP attempted to perform Missing Function Level Access Control attacks on the Apache server.

It attempted to make unauthorized calls using the VOIP server.

It carried out key logging attempts, hoping to record keyboard inputs during SSH sessions.

Unauthorized Access Attempts to Admin Directories: Repeated HTTP requests to known admin directories.

This IP belongs to Facebook.

It showed unusual patterns in the sequence of requests.

It attempted to execute unauthorized commands on the Apache server.

Signs of Clickjacking: You might observe layered multiple HTTP requests aiming to trick users into unintended interactions.

There were several attempts from this IP to manipulate our server DNS records.

This IP belongs to Valero Energy.

The IP tried to manipulate DNS lookup processes to divert traffic to a malicious destination.

The IP attempted to exploit a mail server's greylisting functionality to bypass spam filters.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

This IP belongs to Northwestern Mutual.

It sent unusually large Asterisk packets, potentially indicating a buffer overflow attempt.

Our system flagged the IP for injecting malicious script into benign pages through the man-in-the-browser attack.