This IP belongs to MetLife.

This IP belongs to FedEx.

Several phishing emails have been traced back to this suspicious IP address.

We observed the IP distributing harmful document tracking tools.

This IP belongs to Exxon Mobil.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

The IP attempted to perform a replay attack on the POP3 server.

The IP attempted to use the FTP server to distribute rootkit software.

Path Traversal / URI Encoding Attacks: You might notice HTTP GET requests that include ".." or "%2e%2e" or "%252e%252e", indicating a path traversal attack.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

This IP belongs to IBM.

The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

Several instances of aggressive advertising spyware have been linked to this IP.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

This malicious IP was reported for attempting to perform a Replay attack, capturing FTP authentication data and resending it to gain unauthorized access.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

The IP attempted to perform ARP Spoofing attacks on the Apache server.

The IP was traced back to stealthy installation attempts of clipboard monitors.

The IP sought to exploit the SSH-1 CRC32 vulnerability for expansive unauthorized access.

The IP attempted to use the FTP server to distribute VPN tools.

This IP has been identified as running a botnet targeting our server systems with ransomware.

Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

The specific IP has been identified attempting to load malicious browser helper objects into the network.

This IP gave off a red flag for hosting a hidden command and control server for malicious bots.

This malicious IP was reported for trying to perform a FTP Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.