This malicious IP was reported for attempting to download files from the FTP server without authorization, potentially stealing sensitive data.

The IP attempted to login to the POP3 server with an invalid username.

The IP attempted to use the FTP server to distribute data recovery tools.

GET /setup.php: Effort to locate setup files for PHP applications.

This IP belongs to CenturyLink.

It attempted to use the FTP server to distribute traffic monitoring tools.

It tried to exploit Apache Struts vulnerabilities to compromise our web applications.

Participated in the notorious Water Torture attack to overload our DNS servers.

This IP belongs to GitHub.

The IP made multiple requests with the same X-UIDH header.

This IP belongs to Bristol-Myers Squibb.

The IP attempted to send spam emails from the Postfix server.

This IP belongs to Reliance Jio.

It attempted to use the Postfix server to relay emails with misleading headers to other servers.

This IP belongs to MetLife.

Damaging activities showing connections to rootkit attacks were associated with this IP.

This IP belongs to UnitedHealth Group.

Repeated attempts to perform actions that are typically restricted, such as creating or modifying user accounts.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

Requests to non-existent endpoints (indicating potential reconnaissance activity).

An identity theft activity was linked back to this malicious IP.

Numerous incidents of botnet infestations were traced back to this offensive IP address.

It attempted to login to the Postfix server with an invalid password.

The IP has been traced back to system monitors, aiming to watch and record user activity.

It persistently tried to exploit weaknesses in the SSH communication encryption.