Outbound Connection to a Suspicious IP Address

Attackers frequently set up websites and servers to distribute malware, communicate with command-and-control servers, or collect exploitable information from victims. The IP addresses associated with known malicious servers can be identified from threat intelligence, which is a collection of information curated by the security community. Network devices that communicate with suspicious IP addresses should be investigated. These devices might be vulnerable to various exploits, which could expose information or result in a persistent attack on the network.