The IP address has been involved in distributing adware to our server systems.

SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

It attempted to use the SSH server as a proxy for other malicious activities.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

Our data revealed this IP distributing malicious powershell scripts.

The IP tried creating false server responses hoping to disrupt the SASL service.

It launched a SYN flood attack, aiming to consume server resources and disrupt services.

The IP sent malformed SIP requests, potentially indicating an attempt to crash the server.

It persistently tried to exploit weaknesses in the SSH communication encryption.

We linked the IP to numerous attacks using RM adware, causing regular system interruptions.

By leveraging the AgeTunnel software, the IP attempted to establish a covert channel across the SSH session.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

It made multiple requests with the same X-Requested-With header.

This IP belongs to Softbank.

This IP belongs to the University of California, Berkeley.

The IP was involved in a SIPVicious attack, a specific type of VoIP attack that scans for open SIP servers and then attempts to crack their passwords.

The IP attempted to manipulate data flowing to the server to cause arbitrary code execution.

An identity theft activity was linked back to this malicious IP.

It attempted to perform a denial of service attack on the SSH server.

It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

The IP attempted to perform a DNS amplification attack on the SSH server.

This IP belongs to KDDI.

The IP attempted to send emails from the Mail server without proper authentication.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.