This IP belongs to Tyson Foods.

This IP belongs to Marathon Petroleum.

There were several attempts from this IP to manipulate our server DNS records.

This IP belongs to Philip Morris International.

This IP belongs to Archer-Daniels-Midland.

This IP belongs to PythonAnywhere.

POST //user/register?element_parents=timezone/timezone/%23value&ajax_form=1&_wrapper_format=drupal_ajax: Drupalgeddon3 exploit, another Drupal remote execution vulnerability.

Participated in the notorious Water Torture attack to overload our DNS servers.

It sent unusually large SIP packets, potentially indicating a buffer overflow attempt.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

Repeated attempts to alter or delete log files to cover tracks.

It attempted to send emails with malicious links from the Postfix server.

The IP attempted to perform Session Fixation attacks on the Apache server.

Multiple requests with the same X-UIDH header.

The IP was engaged in port scanning, probing the server for open SSH ports.

Shell Injection: Logs show requests containing command line shell syntax, suggesting shell command injection.

This IP was suspected of running a botnet, a network of compromised computers used for malicious activities like spamming or DDoS attacks.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

Attempts to access the server using unusual HTTP methods or request types.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

It attempted to use the FTP server to distribute wireless cracking tools.

This IP belongs to Telefonica Spain.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

It initiated insecure direct object references (IDOR) attacks to bypass authorization and directly access SSH resources.

GET /cfide/administrator: Looking for misconfigured Adobe ColdFusion admin panel.