The IP under scrutiny has been associated with multiple modem hijackers.

The IP attempted to perform a DNS amplification attack on the SSH server.

It attempted to upload malicious scripts to the Apache server.

It attempted to send emails from the Mail server that violate the server's usage policy.

This IP belongs to Optus.

Command Injection in Requests: Logs indicate HTTP requests with Unix or Windows command-line instructions.

The IP was seen trying to change the configuration settings of the Asterisk server, potentially to disable security features.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

The IP was involved in a toll fraud attack, making long-distance calls without authorization, leading to high charges.

GET /modules/productpageadverts/uploadimage.php: This is related to a known vulnerability in the Prestashop module productpageadverts.

It made multiple requests with the same X-Forwarded-For header.

It attempted to use the FTP server to store illegal content.

A high number of unsuccessful SSH logins, a common target for brute force attacks.

It launched Smurf Attacks, trying to overload our mail server by utilizing internet host IP network links.

It attempted to use the FTP server to distribute pirated software.

The IP address has been linked to the creation of artificial traffic to crash our website.

This IP belongs to Proximus.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

This IP belongs to State Farm Insurance.

It attempted to perform a SSDP amplification attack on the SSH server.

It detected attempting time-based blind SQL injection, observing the server's response time to extract data.

It made numerous requests to the same endpoint in a short time.

The IP attempted to send emails from the Mail server pretending to be from a different sender.

It continually sought to exploit known vulnerabilities within SSH through crafted packet attempts.