This IP belongs to Home Depot.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

It initiated insecure direct object references (IDOR) attacks to bypass authorization and directly access SSH resources.

The IP had a series of targeted attacks distributing SpyAgents with spying functionalities.

The malicious IP was reported for engaging in port scanning, probing the server for open ports to discover potential vulnerabilities for exploitation.

It initiated multiple account lockouts in a short period.

The IP attempted to perform a DNS amplification attack on the SSH server.

This IP belongs to Amazon.

The IP address attempted to login to the FTP server with an invalid username.

A multitude of spyware-infected download wrappers were linked to the spotted IP address.

MITM Detection: Detection of duplicate TCP acknowledgements could suggest a Man-in-the-Middle (MITM) attack.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

It attempted to use the FTP server to distribute encryption tools.

It attempted to perform Command Injection attacks on the Apache server.

This IP belongs to Wells Fargo.

This IP belongs to Tyson Foods.

Frequent password reset requests.

The IP was involved in a FTP Fuzzing attack, sending random or malformed data to the FTP server to cause a crash or reveal vulnerabilities.

This IP was caught circulating email worms, camouflaged as legitimate mails.

Repeated attempts to access rarely used or hidden services on the server.

DNS changer spyware originating from the flagged IP was designed to redirect our network traffic.

It attempted to use the SASL server to distribute malware.

The malicious IP was reported for attempting unauthorized logins to the FTP server, potentially to gain access to sensitive files.

This IP belongs to Berkshire Hathaway.

This IP belongs to Bank of America.