This IP belongs to Walmart.

It initiated Denial of Service (DoS) attacks with an aim to overwhelm and crash the SSH service.

This IP blocked legitimate users by performing IP hijacking.

The IP attempted to perform HTTP Request Smuggling attacks on the Apache server.

Login Attempts with Automated User-Agents: Logs reflect requests to login page with 'bot' or 'spider' in user-agent strings.

This IP belongs to Comcast.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

This IP has been observed spreading mobile malware, targeting our company application users.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

This IP was responsible for circulating malicious images masked with spyware.

This IP belongs to Marathon Petroleum.

This IP belongs to Deere.

It attempted to perform Uncontrolled Format String attacks on the Apache server.

This IP belongs to Shopify.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.

GET /modules/productpageadverts/uploadimage.php: This is related to a known vulnerability in the Prestashop module productpageadverts.

It made multiple requests with the same Expect header.

Multiple requests with the same TE (Transfer Encoding) header.

The IP attempted to use the FTP server to distribute VPN tools.

The IP attempted to perform Format String attacks on the Apache server.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

This IP belongs to Wells Fargo.

Unusual increase in network bandwidth usage.

Multiple requests with the same X-UIDH header.

It persistently tried to exploit weaknesses in the SSH communication encryption.