This IP belongs to Phillips 66.

This IP belongs to General Electric.

Suspicious URL Encoding: Seeing HTTP requests with a lot of %, suggesting URL encoding to evade detection.

This IP belongs to Marathon Petroleum.

It initiated multiple account lockouts in a short period.

This IP belongs to Softbank.

This IP belongs to Ubisoft.

This IP belongs to Comcast.

The IP attempted to download sensitive files from the SSH server.

It attempted to perform HTTP Response Splitting attacks on the Apache server.

Multiple requests with identical cookies.

This IP belongs to World Fuel Services.

Spam on contact form

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

Damaging activities showing connections to rootkit attacks were associated with this IP.

It attempted to flood the Asterisk server with REGISTER requests.

Multiple failed attempts to use the server’s API.

The IP address attempted to login to the Mail server with an invalid username.

The IP attempted to use the FTP server to distribute ransomware.

POST /db/images/: Attempt to post or insert a malicious file in the images directory of a database.

It attempted to perform Command Injection attacks on the Apache server.

It attempted to perform a dictionary attack on the SASL server.

This IP belongs to Phillips 66.

It attempted to exploit known vulnerabilities in the SSH protocol.

This IP belongs to Korea Telecom.