The specific IP has been identified attempting to load malicious browser helper objects into the network.

This IP belongs to Cardinal Health.

This IP belongs to Sprint.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.

The IP attempted to perform a man-in-the-middle (MitM) attack to intercept SSH communication.

The IP made multiple requests with the same Proxy-Authorization header.

This IP belongs to Travelers Cos.

It launched header-based exploits, attempting to manipulate HTTP headers to cause inappropriate server responses.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

This IP belongs to MTN.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

This IP belongs to Procter & Gamble.

It attempted command injection attacks, hoping to execute unauthorized commands.

We flagged down attempts from the IP to leak backdoor viruses into the system.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

The IP attempted to mark emails as read on the IMAP server without authorization.

Multiple attempts to access the server using credentials of inactive or seldom-used accounts.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

It sent SIP INVITE requests to non-existent extensions.

The IP attempted to use the FTP server to distribute keylogging software.

The IP attempted to perform a Fraggle attack on the SSH server.

GET /setup.php: Effort to locate setup files for PHP applications.

The IP attempted to perform XML Injection attacks on the Apache server.

Attempts to use automated scripts or tools for password cracking.

The IP attempted to list the contents of directories that it should not have access to.