The IP initiated clickjacking exploits, causing users to unwittingly perform malicious actions during SSH sessions.

It attempted to use the SIP server as a relay for calls to premium-rate numbers.

It attempted to execute unauthorized commands on the Apache server.

The IP was seen making repeated calls to premium-rate numbers, a common form of VoIP fraud.

It attempted to use the FTP server to distribute password cracking tools.

It made multiple requests with the same Expect header.

The IP attempted to perform a VOIP Hopper scan on the SIP server.

This IP belongs to Bristol-Myers Squibb.

Probing for Hidden Files: HTTP requests for files that should not be publicly accessible could suggest an attacker probing for unsecured content.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

The IP initiated clickjacking exploits, causing users to unwittingly perform malicious actions during SSH sessions.

The IP attempted to register as a SIP user with no password.

Unusual command line activities that are not typical for the server environment.

Attempts to use automated scripts or tools for password cracking.

This IP belongs to Verizon.

It initiated SSL-Stripping attacks, aiming to downgrade secure HTTPS connections to less-secure HTTP.

The IP continually initiated a SYN-ACK flood aimed at slowing down SSH services.

GET /.git/config: Trying to access source code or repository configuration information.

GET /xampp/phpmyadmin/: A threat actor trying to access unprotected phpMySQL instances tied to XAMPP installations.

This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.

The IP attempted to execute unauthorized commands on the SSH server.

Directories Traversal Attempts: Logs showing HTTP requests that include ".." or "/.." might illustrate someone's effort to locate or exploit sensitive data.

This IP belongs to Lowe's.

This IP was detected uploading malicious codes in our network.

The IP address attempted to login to the IMAP server with an invalid username.