4111111111111111

4111111111111111

4111111111111111

4111111111111111

4111111111111111

The IP attempted a pass-the-hash attack, trying to authenticate without knowing the plaintext password.

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

This IP belongs to Johnson & Johnson.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

It sent SIP INVITE requests to non-existent extensions.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

HTTP Request with Large Content-Length: This could potentially indicate a buffer overflow attack where an attacker tries to crash the system by sending more data than it can handle.

It was found that the IP had deployed rogue security software in our system.

It attempted to login to the IMAP server with an invalid password.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

This IP belongs to Dow Chemical.

It made multiple requests from user agents claiming to be bots.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

This IP belongs to Wikimedia Foundation.

The IP made multiple requests using uncommon HTTP methods.

The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

This IP belongs to Deutsche Telecom.

It performed botnet operations, controlling a group of “zombie” computers to amplify its DDoS attacks.

The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.