An unauthorized login attempt was detected on a Cisco VPN endpoint. The attack was initiated by exploiting known vulnerabilities or using stolen credentials. The attacker IP is flagged as malicious in multiple threat intelligence sources.