This IP belongs to Best Buy.

Our team discovered that specific IP was distributing intrusive cookie trackers.

Our firewall recorded intrusion attempts originating from this suspicious IP.

Excessive Subdomain Requests: A large number of requests for non-existing subdomains could suggest a subdomain takeover attempt.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

This IP belongs to Intel.

This IP belongs to Cigna.

This IP belongs to Hostgator.

It attempted to perform a session hijacking attack on the SSH server.

GET /cfide/administrator: Looking for misconfigured Adobe ColdFusion admin panel.

This IP was caught conducting cookie-poisoning attack.

This IP belongs to Cardinal Health.

It executed blind command injection, exploiting server inputs to gain unauthorized system control.

The IP attempted to send spam emails from the Postfix server.

The malicious IP was seen trying to perform a Replay attack, capturing SIP authentication data and resending it to gain unauthorized access.

It made multiple requests with the same Max-Forwards header.

Multiple requests to the same endpoint in a short period of time.

This IP belongs to JPMorgan Chase.

The IP set off alarms for an attempted man-in-the-middle attack on our servers.

It attempted to perform a SIP Register Flood on the Asterisk server.

This IP address from an unusual location has successfully installed malware on our servers.

The IP made multiple requests using uncommon HTTP methods.

It sent unusually large VOIP packets, potentially indicating a buffer overflow attempt.

GET /trace.axd: An attempt to find a debug handler in ASP.NET.

This IP belongs to General Dynamics.