This IP belongs to NTT Docomo.

It attempted to login to the SASL server with an invalid password.

GET /vendor/phpunit/phpunit/src/Util/PHP/eval-stdin.php: request for a file often associated with an outdated version of Composer and phpunit used in a remote code execution attack.

It attempted to upload malicious files to the SSH server.

The IP has been caught trying to deliver spyware into our system to compromise sensitive data.

The IP attempted to create new directories on the FTP server.

Server Side Template Injection: Suspicious input patterns aimed at coercing server-side parsers to execute injected code.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

This IP was seen scanning for open ports and vulnerabilities, a common reconnaissance activity before launching attacks.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

Repeated failed attempts to perform actions that require higher privileges.

This IP belongs to Globe Telecom.

It initiated multiple account lockouts in a short period.

Repeated Broken Authentication: Tons of successful authentication requests with unassociated actions could depict broken authentication mechanism.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

Multiple requests with the same Proxy-Authorization header.

Damaging activities showing connections to rootkit attacks were associated with this IP.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

It attempted to take advantage of misconfigurations in the Apache server.

Phishing emails received several times a day from IP address 5.182.19.7. Different subject lines, all promising you have won something if you enter your details. Phishing of this nature is criminal activity.

It attempted to perform Insecure Direct Object References attacks on the Apache server.

This IP belongs to Cardinal Health.

This IP belongs to Pinterest.