This IP belongs to Fannie Mae.

Initiated rogue DHCP server set up, attempting to disrupt our network and intercept emails.

It tried cookie theft, attempting to steal session data of a legit email user which can be misused to hijack the session.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

The IP was found trying to maliciously clone the SSH certificates for privileged access.

This IP belongs to Microsoft.

The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

Multiple requests with the same Max-Forwards header.

The IP address was found roaming through the network, scanning for weak spots.

Repeated attempts to access rarely used or hidden services on the server.

Unusual patterns in session IDs.

Our system flagged this IP as conducting fraudulent transactions activities.

Excessive traffic from a single IP address.

It was flagged that this IP had been used in conducting method tampering on our servers.

This IP belongs to General Electric.

The IP under scrutiny has been associated with multiple modem hijackers.

The IP was the origin of numerous webcam loggers, a serious privacy invasion.

The IP was the origin of numerous webcam loggers, a serious privacy invasion.

This IP belongs to BT Central Plus.

This IP belongs to NTT Docomo.

It attempted to send emails from the Postfix server that violate the server's email content policy.

It was observed attempting to conduct a replay attack, resending captured SSH packets in hopes of session hijacking.

The IP attempted to use the FTP server to distribute secure deletion tools.

The IP attempted to gain unauthorized access to the Apache server.