Past Connection to a New Suspicious IP Address

Attackers frequently set up websites and servers to distribute malware, communicate with command-and-control servers, or collect exploitable information from victims. The IP addresses associated with malware and known malicious servers can be identified from threat intelligence, which is a collection of information curated by the security community. Devices that communicate with suspicious IP addresses should be investigated for vulnerabilities to exploits that could expose information or result in a persistent attack on the network.

The system might change the risk score for this detection.