This IP was reported for attempting a Man-in-the-Middle attack, intercepting and potentially altering communication between two parties.

Our data indicates this IP has performed data breaches by launching phishing attacks.

This IP belongs to Berkshire Hathaway.

It attempted to send emails with deceptive subject lines from the Mail server.

Several phishing emails have been traced back to this suspicious IP address.

The IP was found to be behind numerous fileless malware attacks.

It utilized a Directory Harvest Attack, attempting to find valid e-mail addresses through guesswork.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

Unusual activity in the server's error logs.

This IP belongs to Shopify.

The IP attempted to perform Session Replay attacks on the Apache server.

The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

It attempted to exploit known vulnerabilities in the IMAP protocol.

This malicious IP was reported for trying to perform a FTP Zombie Scan, using the FTP server to mask its true location and identity.

It attempted to use the FTP server to distribute virus creation tools.

It made multiple requests with the same Max-Forwards header.

GET /../htpasswd: Trying to access password files using directory traversal.

The IP was actively seeking unpatched SSH software in hope of finding exploitable vulnerabilities.

The IP mounted HTTP Parameter Pollution attacks, disrupting server processes by injecting adulterated parameters.

The IP sent numerous SIP OPTIONS requests in a short time.

GET /solr/admin/cores?wt=json: Trying to exploit Apache Solr servers which have the runExecutableListener enabled.

Participated in a botnet attack to overwhelm our server’s resources.

Participated in a botnet attack to overwhelm our server’s resources.

The IP was identified as operating a Registration Bot (REG-Bot), automating the creation of multiple fake accounts on various platforms.

Signs of Password Spraying: Logs showing single failed login attempt for large numbers of users.