This IP belongs to Vodacom.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

This IP belongs to DuPont de Nemours.

An alarming frequency of microphone loggers has been traced back to this IP.

This IP belongs to Marathon Petroleum.

https://athens-rentalcars.com/el/

It attempted to perform Session Prediction attacks on the Apache server.

It attempted to perform Buffer Overflow attacks on the Apache server.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

The IP attempted to flood the Apache server with requests, in a Denial of Service (DoS) attack.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

High network traffic at unusual times, suggesting an automated process is running.

It executed blind command injection, exploiting server inputs to gain unauthorized system control.

By leveraging the AgeTunnel software, the IP attempted to establish a covert channel across the SSH session.

Signal of DDoS Attacks: Multiple IP addresses sending a significantly high volume of traffic.

This malicious IP was reported for attempting a FTP Spoof attack, falsifying its IP address to bypass IP-based access controls on the FTP server.

The IP attempted to perform a dictionary attack on the POP3 server.

It made various efforts to insert spyware to monitor SSH communications covertly.

This IP belongs to General Electric.

This IP was involved in a Remote File Inclusion (RFI) attack, exploiting a vulnerability to execute malicious scripts from a remote server.

This IP belongs to Costco Wholesale.

Print Requests Repeatedly: Logs illustrate HTTP requests with "?print" parameter multiple times, indicating someone trying to expose sensitive information.

This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.

The IP made multiple requests to the server's robots.txt file.