Several phishing emails have been traced back to this suspicious IP address.

The IP attempted to perform a replay attack on the POP3 server.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

Repeated attempts to access the server using encrypted or obfuscated data, which can indicate an attacker is trying to hide their activities.

Attempts to access sensitive areas of the server, such as the admin page or user account information.

This IP belongs to General Electric.

Numerous incidents of botnet infestations were traced back to this offensive IP address.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

It made various efforts to insert spyware to monitor SSH communications covertly.

The IP sent malformed VOIP requests, potentially indicating an attempt to crash the server.

It attempted to perform a phishing attack using the IMAP server.

Arbitrarily Long GET Requests: Very long GET requests may suggest an attacker is attempting a GET Flood DDoS attack.

Login attempts at unusual times (e.g., in the middle of the night).

Login attempts using old or outdated protocols.

It attempted to perform Race Condition attacks on the Apache server.

The said IP was the source of several rootkit deployment attempts.

The IP was observed participating in Social Engineering attacks to manipulate individuals into revealing SSH login details.

Repeated failed attempts to access application interfaces or ports that are typically not open to the public.

This IP belongs to Oracle.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

The IP attempted a Rootkit installation to gain root access and control server activity.

The IP address attempted to login to the SSH server with an invalid username.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.