It attempted to perform a SIP Register Flood on the SIP server.

Attempts to access the server using credentials that have been involved in previous security incidents.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.

It appears this IP was linked to a number of drive-by-download attacks, silently downloading spyware.

The IP attempted to register as a SIP user with no password.

Multiple login attempts using common or easily guessable passwords (like 'password123', 'admin', etc.).

The IP attempted to send malware-infected attachments from the Mail server.

This IP belongs to Walmart.

It attempted to use the Postfix server to relay spam to other servers.

This IP belongs to Plusnet.

The IP has been tagged as a source for data mining spyware, aiming to gather personal information.

The IP was engaged in port scanning, probing the server for open SSH ports.

This IP was responsible for circulating malicious images masked with spyware.

This IP belongs to Cisco Systems.

The IP attempted to use the FTP server to distribute spam.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.

The IP was seen trying to exploit known vulnerabilities in the Asterisk server, a common tactic for gaining unauthorized access or control.

The IP attempted to send emails from the Postfix server pretending to be from a different sender.

It attempted to use the Postfix server to relay phishing emails to other servers.

This IP belongs to 3M.

Distributed session hijackers from the IP were designed to capture and exploit web browser sessions.

This IP belongs to TELUS Communications.

This IP belongs to CenturyLink.

The IP attempted to send malware-infected attachments from the Mail server.

The malicious IP was reported for attempting a RTP Replay attack, capturing RTP packets and resending them to disrupt communication.