The IP was flagged for attempting dictionary attacks on our user accounts.

The IP attempted to perform a Ping of Death attack on the SSH server.

Various incidents of unwanted installation of malicious gaming apps were traced back to this IP.

It attempted to use the SIP server to perform a reflection DDoS attack.

This IP belongs to Massachusetts Mutual Life Insurance.

Our logs indicated an unusually high traffic volume originating from this IP address.

It attempted to perform Insecure Direct Object References attacks on the Apache server.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

This malicious IP was reported for attempting a FTP Bounce attack, exploiting the FTP protocol's proxy command to scan ports and networks.

Automated Bot Traffic: Logs are showing an unusual large amount of traffic from known or suspected bot IPs.

This IP belongs to Allstate.

This IP belongs to GoDaddy.

It initiated 'HOIC' (High Orbit Ion Cannon) to overload our Apache service with junk data.

Unusual Query String Patterns: Repeated HTTP requests with minor alterations to the query string data, signifying an attacker mapping out how different inputs affect the response.

This IP was associated with targeted spear phishing attempts against our senior staff.

The IP attempted to perform a distributed denial of service attack on the SSH server.

It attempted multiple LDAP injection attacks to gain unauthorized access.

The IP made multiple requests with the same Proxy-Connection header.

It was making constant NDR (Non-Deliverable Receipt) or backscatter attacks by generating large amount of invalid email addresses.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

This IP belongs to JPMorgan Chase.

The IP attempted to execute unauthorized commands on the SSH server.

Bogus pop-ups irritating our end-users were found to be released by this infamous IP.

It attempted multiple LDAP injection attacks to gain unauthorized access.

Multiple requests with the same Proxy-Authorization header.