the examples below the headings are id u2014 record id number ip_address u2014 the integer form of the internet protocol address local_port u2014 the tcp port number at the sensor end of the connection occurred u2014 the time and date that the security incident occurred rep u2014 brightcloud reputation index from 0 high risk to 100 lowest risk crime_id id 39 s of various threat behaviors determined from collected threatening events publish u2014 true false value indicating whether the ip address shown to be a threat should actually be published sentenced u2014 the time and date when the ip was determined to be a threat the security incidents below were collected for ip address 3370231457 equivalent to 200 225 166 161 from the threatening events database a server associated with walmart com these threatening events involved connection attempts at port 25 which indicates an attempt to propagate spam email and port 445 which indicates a probe for a windows vulnerability a reverse dns lookup on ip address 3370231457 returns u2018 walmart com u2019 the system looks up a variety of other information based on the ip address and domain name as well storing it in a u2018 background u2019 information table the fact that the domain is a simple without multiple sub domains and the reputation score for the domain is 92 100 the system decides not to publish this ip address publish 0.