The IP tried to exploit buffer overflow vulnerabilities to run unauthorized code.

This IP belongs to Cardinal Health.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

It attempted to exploit known vulnerabilities in the POP3 protocol.

The IP attempted to use the SASL server to relay phishing emails.

It was involved in the operation of a REG-Bot, a type of bot that performs automated tasks.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

The IP address attempted to login to the FTP server with an invalid username.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

Our system blocked an attempted Code Injection attack from this IP.

The IP tried launching Server Query Flooding to overwhelm our server with requests.

Multiple requests using HTTP methods that are not typically used (e.g., TRACE).

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

The IP attempted to perform a QOTD amplification attack on the SSH server.

Multiple requests with the same Via header.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

The IP attempted to perform a SIP Invite Flood on the SIP server.

The IP was seen trying to perform a Denial of Service (DoS) attack, attempting to make a machine or network resource unavailable to its intended users.

The IP was flagged for performing XML External Entity attacks, exploiting improperly processed XML inputs.

This IP belongs to Shaw Communications.

Purposefully tried to clog our mail server's resources by creating a mail loop configuration.

The IP attempted to perform HTTP Verb Tampering attacks on the Apache server.