The IP attempted to perform a dictionary attack on the IMAP server.

It attempted to use the VOIP server as a relay for calls to premium-rate numbers.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

It attempted to perform a phishing attack using the IMAP server.

Uncommon Referer Header: HTTP logs record requests from an uncommon or suspicious 'Referer' header.

The IP was seen trying to perform a SIP Registration Hijacking attack, attempting to impersonate a legitimate user to receive their calls.

The IP was marked trying to carry out Backscatter spam by replying to spam using the server's configuration.

The IP sent numerous Asterisk OPTIONS requests in a short time.

Multiple failed login attempts from the same IP address.

The malicious IP tried to brute force its way into the SASL authentication process.

GET /login.action: Trying to find a Struts2 application to exploit.

This IP belongs to McKesson.

This IP belongs to AT&T.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

This IP belongs to Valero Energy.

It attempted to create new directories on the SSH server.

It attempted to send emails with malicious links from the Mail server.

This IP belongs to Korea Telecom.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

It launched Spoofing attacks, trying to hide its identity by disguising itself as a trusted user or server.

The IP attempted to create new directories on the FTP server.

The IP attempted to use the FTP server to distribute hacking tutorials.

The IP was noted for executing SYN flood attacks, purposefully creating half-open connections to deplete server resources.

This IP belongs to Dow Chemical.