GET /xampp/phpmyadmin/: A threat actor trying to access unprotected phpMySQL instances tied to XAMPP installations.

The IP attempted to perform a DNS amplification attack on the SSH server.

This IP belongs to Anthem.

This IP belongs to Caterpillar.

The malicious IP engaged in distributed denial of service (DDoS) attacks, exhausting server resources and disrupting SSH services.

It was involved in a Distributed Denial of Service (DDoS) attack.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

Multiple requests with identical cookies.

It made numerous requests to the same endpoint in a short time.

It attempted to carry out a dictionary attack on pop3 logins to gain unauthorized access.

Our logs indicated an unusually high traffic volume originating from this IP address.

This IP belongs to NetEase.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

The IP attempted to bypass the SASL server's authentication mechanism.

POST /WebResource.axd: Attempting to exploit a known .NET vulnerability.

the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

This malicious IP was reported for attempting a Sniffing attack, capturing and analyzing FTP traffic to glean sensitive information.

This IP belongs to DuPont de Nemours.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

It made multiple requests with the same X-Wap-Profile header.

It attempted to make unauthorized calls using the Asterisk server.

Our system blocked an attempted Code Injection attack from this IP.

It attempted to perform a dictionary attack on the SSH server.

The IP tried to carry out illegal 'HTTP Request Smuggling' to fool the Apache server.