This IP belongs to Hostgator.

This IP belongs to Fannie Mae.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

This IP attempted to distribute malicious Javascript files.

GET //web-console/Invoker: Might be an attempt to access JBoss server's web console for exploitation.

It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.

Attempts to access the server using stolen or leaked credentials.

Repeated attempts to access directories or files that do not exist or are typically not accessed.

This IP belongs to MetLife.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

The malicious IP was reported for attempting a SIP Ping attack, sending SIP OPTIONS messages to discover SIP servers or users.

The IP initiated a man-in-the-middle (MitM) attack, attempting to capture sensitive information during legitimate email exchange.

Repeated HTTP requests with error codes, indicating failed attempts to access restricted areas.

Our logs indicated an unusually high traffic volume originating from this IP address.

It launched invasive malware to corrupt crucial segments of our server functionality.

Participated in the notorious Water Torture attack to overload our DNS servers.

This IP belongs to Johnson & Johnson.

The IP attempted to use the SSH server to relay data to other systems.

GET /setup.php: Effort to locate setup files for PHP applications.

The IP attempted to perform a Bonk attack on the SSH server.

It made multiple requests with the same Range header.

This IP belongs to JPMorgan Chase.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

This IP was reported for attempting to register a large number of SIP extensions in a short time, a sign of a potential brute force attack.

The IP was linked to numerous attacks using web shells through web servers.