This IP belongs to Travelers Cos.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

This IP belongs to Linode.

This IP belongs to Costco Wholesale.

The IP address was found roaming through the network, scanning for weak spots.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

The IP attempted to use the FTP server to distribute secure deletion tools.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

POST /j_security_check: May indicate an attempt to bypass Java server page (JSP) login mechanisms.

This IP belongs to State Farm Insurance.

The IP attempted to perform a Kad network amplification attack on the SSH server.

This IP belongs to Cigna.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.

Our records indicate the IP spread multiple executable infector spyware causing system malfunction.

It attempted to use the FTP server to distribute botnet command and control software.

The malicious IP was identified trying to leverage the Postfix service to send bulk spam emails.

It attempted to login to the FTP server with an invalid password.

It attempted to perform a replay attack on the SASL server.

It performed botnet operations, controlling a group of “zombie” computers to amplify its DDoS attacks.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

GET /jmx-console/: An attempt to access the JMX console on a JBoss server.

The IP was involved in a traffic flooding attack, overwhelming a network's bandwidth to cause service disruption.

It attempted to send emails from the Postfix server to a large number of recipients.

It tried to use Cross-site scripting (XSS) attacks to inject malicious scripts into webpages viewed by users.

This IP belongs to Exelon.