The IP was reported for hosting a phishing website, deceiving users into providing their sensitive personal or financial information.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

Multiple requests with identical request parameters.

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

Multiple requests with identical POST parameters.

This IP belongs to Verizon Communications.

Repeated attempts to exploit known vulnerabilities in the server operating system or applications.

This IP was linked to an attempt at distributing malicious software within our system.

The IP attempted to use the Mail server to relay emails with malicious links to other servers.

Multiple login attempts using different usernames, suggesting an attacker is trying to guess the correct username/password combination.

It attempted to flood the SIP server with REGISTER requests.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

Multiple requests with the same TE (Transfer Encoding) header.

This IP belongs to Sysco.

It sent SIP INVITE requests to non-existent extensions.

An identity theft activity was linked back to this malicious IP.

It was involved in a Distributed Denial of Service (DDoS) attack.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

This IP belongs to BT Central Plus.

The IP attempted to bypass IP blacklisting by rapidly changing its IP address.

This IP was distributing rogue security software, misleading users to think their systems are infected.

The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

This IP belongs to Best Buy.

It made multiple requests with the same X-Csrf-Token header.