GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.

This IP belongs to Airtel.

The IP attempted to perform a Nestea attack on the SSH server.

It appears that this IP was initiating DNSChanger malware attacks on our network.

It attempted to delete emails from the IMAP server without authorization.

It launched a SYN flood attack, aiming to consume server resources and disrupt services.

The IP was seen launching a DDoS attack on the Asterisk server, overwhelming it with traffic to disrupt its normal functioning.

Repeated attempts to exploit known vulnerabilities in server software.

This IP belongs to United Technologies.

It attempted to perform a Teardrop attack on the SSH server.

It was detected trying to perform cross-site scripting to bypass the same origin policy on Apache.

The IP made multiple requests with the same Warning header.

Multiple requests with identical Accept-Encoding headers.

This IP belongs to Deutsche Telekom AG.

It made multiple requests with the same If-None-Match header.

It sent VOIP requests to non-existent extensions.

With the introduction of hidden malicious intent, this IP found to be operating masked redirect attacks.

The notorious IP attempted to distribute Banker Trojans aimed to steal financial data.

This IP was seen trying to perform a RTP Injection attack, inserting audio into an established VoIP call.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

Attempts to access the server using unusual HTTP methods or request types.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

Side Channel Attacks: Repeated requests aimed at inferring sensitive information through observation of web responses.

Multiple requests with the same Proxy-Connection header.