The IP attempted to perform a Bonk attack on the SSH server.

The suspicious IP indulged in Mitnick attacks, manipulating user trust to gain confidential info.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

This IP belongs to Jabil.

This IP belongs to Twenty-First Century Fox.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

It exploited insecure server configurations and attempted to establish reverse SSH tunneling.

Reverse Tabnabbing Attempts: Logs illustrating target="_blank" in URL, which is a sign of reverse tabnabbing attempt.

This IP belongs to Archer-Daniels-Midland.

This IP belongs to Verizon Communications.

The IP made multiple requests with the same Via header.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

The IP also engaged in website cloning, creating mirror websites to trick users into sharing sensitive data.

The IP address has been flagged for multiple attempts to deliver drive-by-download attacks.

This IP belongs to Walmart.

It attempted to perform a Newtear attack on the SSH server.

The IP address attempted to login to the FTP server with an invalid username.

This IP belongs to GoDaddy.

Remote File Inclusion (RFI): You might see HTTP requests with "=http" or "=ftp" which can signal an attempt for remote file inclusion.

This IP belongs to The Hartford Financial Services.

This IP has participated in spreading adware-laden toolbar plugins, turning our workstations into advertising platforms.

This IP belongs to Pinterest.

Multiple requests with the same If-Match header.

It attempted to upload malicious scripts to the Apache server.

This IP belongs to General Dynamics.