The IP was detected while sending out malicious spyware-infected emails.

This IP belongs to United Parcel Service.

This IP belongs to IBM.

It attempted to perform a SSDP amplification attack on the SSH server.

This IP belongs to Cisco Systems.

Too Many HTTP GET Requests: An unusually high number of HTTP GET requests from a single IP or a small set of IPs could indicate a DoS attack.

Too Many Request Timeouts: An abnormal amount of request timeouts might suggest an ongoing Slowloris attack.

The IP was flagged for attempting dictionary attacks on our user accounts.

This IP belongs to Procter & Gamble.

It actively sought to exploit unpatched software within our server applications.

It attempted to perform a SIP Register Flood on the Asterisk server.

It attempted to perform a SIP Register Flood on the Asterisk server.

The IP made multiple requests with the same X-UIDH header.

This IP was seen scanning for open ports and vulnerabilities, a common reconnaissance activity before launching attacks.

This IP belongs to General Dynamics.

The IP tried creating false server responses hoping to disrupt the SASL service.

The IP launched exploitation attacks based on the infamous 'Heartbleed' OpenSSL cryptographic vulnerabilities.

It established numerous 'doppelganger' domains to mimic our SSH server, aiming to trick users into revealing sensitive data.

It made multiple requests with the same Range header.

The IP was seen launching a DDoS attack on the Asterisk server, overwhelming it with traffic to disrupt its normal functioning.

the IP made attempts at wiretapping the network to monitor SSH traffic patterns and gather useful information.

This IP belongs to Oracle.

This IP belongs to Shaw Communications.

Our team flagged this IP for injecting harmful ActiveX codes.

It attempted to exploit known vulnerabilities in the IMAP protocol.