It attempted to flood the Asterisk server with REGISTER requests.

It attempted to use the VOIP server to perform a reflection DDoS attack.

The IP was involved in a traffic flooding attack, overwhelming a network's bandwidth to cause service disruption.

The IP was seen making repeated calls to premium-rate numbers, a common form of VoIP fraud.

The IP was involved in a RTP Mix attack, injecting RTP packets into an ongoing VoIP call to disrupt communication.

It attempted to perform a SIP Register Flood on the SIP server.

This IP was tracked while attempting to distribute secretive and malicious keyloggers.

The IP attempted to perform Session Hijacking attacks on the Apache server.

The IP attempted to perform Directory Traversal attacks on the Apache server.

The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

It attempted to use the SASL server to relay spam.

The IP attempted to send emails from the Postfix server that violate the server's email sending limits.

The IP maliciously used packet sniffers in attempts to decode SSH traffic.

The IP address has been linked to the creation of artificial traffic to crash our website.

HEAD /: May be part of a larger Reconnaissance.

It persistently tried to exploit weaknesses in the SSH communication encryption.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

POST /WebResource.axd: Attempting to exploit a known .NET vulnerability.

It made multiple requests with identical POST parameters.

This IP belongs to Phillips 66.

Multiple requests with the same If-None-Match header.

The IP attempted to use the FTP server to distribute forensics tools.

The IP was involved in a traffic flooding attack, overwhelming a network's bandwidth to cause service disruption.

This IP belongs to Exxon Mobil.

Attempts to use automated scripts or tools for password cracking.