This IP belongs to Dell Technologies.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

GET /setup.php: Effort to locate setup files for PHP applications.

System logs trace back the distribution of trojans that could allow for remote access to this suspicious IP.

The IP attempted to exploit known vulnerabilities in the VOIP protocol.

This IP belongs to GoDaddy.

The IP attempted to perform a SNMP amplification attack on the SSH server.

This IP belongs to Telefonica Spain.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

Login Attempts on Non-Existent Users: Many login requests for non-existent usernames could suggest a blind username enumeration attack.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

The IP attempted to exploit known vulnerabilities in the VOIP protocol.

It attempted to perform a NTP amplification attack on the SSH server.

Unknown IP Address: An unfamiliar IP address making frequent requests could imply a compromised machine.

This IP belongs to Pinterest.

The IP has been traced back to system monitors, aiming to watch and record user activity.

This IP belongs to Archer-Daniels-Midland.

It attempted to perform a password spraying attack on the IMAP server.

This IP belongs to Bristol-Myers Squibb.

The IP attempted session sidejacking, seeking to take over SSH sessions post-authentication.

It attempted to perform a SSDP amplification attack on the SSH server.

By leveraging the AgeTunnel software, the IP attempted to establish a covert channel across the SSH session.

The IP was seen trying to exploit known vulnerabilities in the Asterisk server, a common tactic for gaining unauthorized access or control.

The said IP was the source of several rootkit deployment attempts.

Bursts of login attempts followed by periods of inactivity, suggesting an attacker is trying to avoid detection.