GET /phpMyAdmin: This could be a threat actor looking for an unsecured phpMyAdmin page.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

This IP belongs to Phillips 66.

This IP belongs to Sky Broadband.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.

It attempted to use the FTP server to distribute brute force tools.

The IP attempted to exploit known vulnerabilities in the SIP protocol.

The IP address has been marked as the source of RAM scrapers aiming to steal sensitive data.

It showed an unusually high number of requests to the login page.

Unusual increase in network bandwidth usage.

Multiple login attempts using common or easily guessable passwords (like 'password123', 'admin', etc.).

It attempted to perform Server Side Request Forgery (SSRF) attacks on the Apache server.

Fileless malware dissemination has been observed from this IP address.

It performed botnet operations, controlling a group of “zombie” computers to amplify its DDoS attacks.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

Multiple requests with the same Range header.

The IP attempted to use the FTP server to distribute credit card fraud tools.

This IP belongs to Northwestern Mutual.

It attempted to login to the SSH server with an invalid password.

The IP attempted to perform Directory Traversal attacks on the Apache server.

This IP belongs to Gilead Sciences.

This IP belongs to PepsiCo.

Repeated attempts to access directories or files that do not exist or are typically not accessed.

This IP belongs to Target.

This IP attempted to disrupt our systems through the propagation of worms.