The IP sent numerous VOIP OPTIONS requests in a short time.

This IP belongs to PLDT.

It attempted to perform a SIPVicious scan on the Asterisk server.

This malicious IP was reported for trying to intercept VoIP calls, a type of eavesdropping attack aimed at capturing sensitive information.

HTTP Header Overflow: Logs showing HTTP headers with overly large amounts of data can indicate attempts at header overflow attacks.

It attempted to use the FTP server to distribute intrusion detection system (IDS) evasion tools.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

This IP belongs to NTT Docomo.

The IP attempted to change file permissions on the SSH server.

We linked the IP to numerous attacks using RM adware, causing regular system interruptions.

The IP attempted to use the POP3 server to relay spam.

This IP belongs to Kroger.

The IP has been implicated in multiple cases of URL manipulation attempts.

The malicious IP was seen trying to perform a Replay attack, capturing SIP authentication data and resending it to gain unauthorized access.

This IP belongs to State Farm Insurance.

This IP addressed employed a method of brute force attack attempting to compromise our systems.

GET /.env: Attempting to access a file that may contain sensitive environment variable data.

This IP belongs to TIAA.

The IP attempted to send emails from the Postfix server that violate the server's email sending limits.

The IP was caught attempting to exploit known vulnerabilities within Postfix to gain unauthorized access.

This IP belongs to Xbox Live.

This IP belongs to IBM Cloud Services.

This IP belongs to Citigroup.

This IP was reported for attempting a Teardrop attack, sending mangled IP fragments with overlapping and oversized payloads to crash the target network device.

The IP under scrutiny has been associated with multiple modem hijackers.