This IP belongs to IBM.

This IP belongs to Canadian Department of Defense.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

Multiple requests with the same Proxy-Connection header.

This IP belongs to DuPont de Nemours.

It attempted logins using outdated protocols.

The IP sent numerous VOIP OPTIONS requests in a short time.

Our data revealed this IP distributing malicious powershell scripts.

This IP belongs to Apple.

This IP belongs to United Parcel Service.

Our team has linked several viruses dissemination activities to this IP.

This IP belongs to Allstate.

Web shell Upload: Logs may show successful POST requests to server upload functionality, indicating an attempt to upload a malicious web shell.

The IP was seen trying to exploit known vulnerabilities in server software, a common tactic for gaining unauthorized access or control.

The IP made multiple requests with the same Proxy-Connection header.

The IP was involved in a SIP brute force attack, attempting to guess SIP authentication credentials to gain unauthorized access.

This IP belongs to Wells Fargo.

Connection Timeout Abuse: Logs illustrating excessive requests that aim to use up server connections.

This IP belongs to Massachusetts Mutual Life Insurance.

The IP attempted to perform a SIPVicious scan on the VOIP server.

It attempted to perform a Teardrop attack on the SSH server.

This IP belongs to Zayo Bandwidth.

High network traffic at unusual times, suggesting an automated process is running.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.