This IP belongs to United Technologies.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

This IP belongs to JPMorgan Chase.

The IP was linked to numerous attacks using web shells through web servers.

It made multiple requests with identical cookies.

Unusual patterns in the sequence of requests.

The IP attempted to use the FTP server as a proxy for other malicious activities.

This IP belongs to AT&T.

The IP address attempted delivering malicious packets to disrupt the system's operation.

The IP has initiated several exploits, specifically for software vulnerabilities.

This IP belongs to Dropbox.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

Login attempts at unusual times (e.g., in the middle of the night).

We traced a significant increase in the distribution of malicious fake security software to the reported IP.

This IP was involved in deploying stealthy credential stealers in our network.

This IP was reported for attempting a Dictionary attack on the VoIP server, systematically entering every word in a dictionary as a password to find the correct one.

The IP attempted to perform a password spraying attack on the SSH server.

Multiple attempts to access the server using different ports or protocols.

The IP address generated an unusual increase in network bandwidth usage.

Suspicious Http Referrer Field: HTTP requests with external referrer headers that usually originate from internal source.

This IP was caught distributing malicious APK files.

Login attempts at unusual times (e.g., in the middle of the night).

Multiple requests with the same Expect header.

This specific IP was marked for unauthorized browser changes implying browser hijackers.

It attempted to perform Insecure Direct Object References attacks on the Apache server.