This IP belongs to Plusnet.

It was identified as a BadBot, a type of bot that performs malicious activities.

The IP attempted to use the Mail server to relay phishing emails to other servers.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

This IP was reported for attempting a Man-in-the-Middle attack, intercepting and potentially altering communication between two parties.

This IP belongs to State Farm Insurance.

This IP belongs to Ford Motor.

This IP belongs to Home Depot.

It attempted to send emails with malicious links from the Mail server.

The malicious IP attempted to brute-force the .htaccess file to gain unauthorized administrative access.

Unusual patterns in session IDs.

It attempted to download sensitive files from the FTP server.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

The IP attempted to perform Man in the Browser (MitB) attacks on the Apache server.

This IP belongs to Heroku.

The IP attempted to brute force the password to gain mail account access.

The IP was marked attempting to use infamous 'Ramnit' malware to steal sensitive Apache server data.

This IP belongs to IBM Cloud Services.

It attempted to perform a man-in-the-middle attack on the SSH server.

The IP also engaged in website cloning, creating mirror websites to trick users into sharing sensitive data.

The IP has initiated several exploits, specifically for software vulnerabilities.

The IP attempted to use the FTP server to distribute child pornography.

This IP belongs to Nexon.

Our records indicate the IP spread multiple executable infector spyware causing system malfunction.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.