The IP attempted to perform a SIP Invite Flood on the Asterisk server.

The malicious IP was involved in a SPIT (Spam over IP Telephony) attack, sending unsolicited messages over the VoIP server.

The IP was seen trying to perform a FTP Reflection attack, using the FTP server to amplify its DDoS attack traffic.

Tried to perform a man-in-the-middle attack to intercept and alter communication between the server and clients.

It attempted to send phishing emails from the Mail server.

It attempted zero-day attacks, exploiting unknown vulnerabilities in pop3.

This malicious IP was reported for attempting to perform a FTP Phishing attack, creating a fake FTP login page to deceive users into providing their credentials.

This IP belongs to MetLife.

It initiated several reverse IP lookup requests, probing for server vulnerabilities.

This IP was involved in a Remote File Inclusion (RFI) attack, exploiting a vulnerability to execute malicious scripts from a remote server.

This IP belongs to Johnson & Johnson.

The IP was seen attempting a SYN Flood attack, overwhelming the server by rapidly initiating a connection but not completing it, thereby consuming server resources.

The IP was involved in a Directory Traversal attack on the FTP server, attempting to access restricted directories and files.

Multiple Requests from Different IPs with Same User-Agent: This could be a signal of a coordinated attack originating from compromised machines.

The IP was seen launching a DDoS attack on the FTP server, overwhelming it with traffic to disrupt its normal functioning.

Uncommon Referer Header: HTTP logs record requests from an uncommon or suspicious 'Referer' header.

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

HTTP Request with Odd Timing: Very precisely timed HTTP requests could imply an automated tool or bot.

Login attempts that do not follow typical user behavior patterns.

This IP belongs to FedEx.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

It participated in Unvalidated Redirects and Forwards attacks, leading users to malicious websites via altered SSH links.

The IP under scrutiny has been associated with multiple modem hijackers.

The IP was traced back to stealthy installation attempts of clipboard monitors.

The IP attempted to perform a Multicast DNS amplification attack on the SSH server.