It attempted to login to the IMAP server with an invalid password.

The IP sent numerous SIP OPTIONS requests in a short time.

The IP sent numerous SIP OPTIONS requests in a short time.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

This IP belongs to Vkontakte.

POST /j_security_check: May indicate an attempt to bypass Java server page (JSP) login mechanisms.

The IP launched HTTP tunnel attacks, attempting to wrap other protocols in HTTP to bypass network filters.

Our records indicate the IP spread multiple executable infector spyware causing system malfunction.

The IP attempted to perform a SIPVicious scan on the VOIP server.

Suspicious user account behavior, such as accounts being used at odd hours or performing unusual tasks.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

POST //user/register?element_parents=timezone/timezone/%23value&ajax_form=1&_wrapper_format=drupal_ajax: Drupalgeddon3 exploit, another Drupal remote execution vulnerability.

It executed directory traversal attempts to access unauthorized directories / folders in our server.

The IP attempted to perform a phishing attack using the SASL server.

Remote Execution Attempts: Logs showing unusual terminal commands or scripts run through web access.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

The IP made multiple requests with the same If-Range header.

GET /manager/html: Signals an attempt to access the Tomcat Application Manager.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

It attempted to perform a man-in-the-middle attack on the IMAP server.

It started header injection or email injection attempts, by adding extra data into the headers and confusing the server processes.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

It attempted to use the FTP server to distribute virus creation tools.

The IP attempted to perform a credential stuffing attack on the IMAP server.