It attempted to make unauthorized calls using the VOIP server.

The IP was involved in a SIP Flooding attack, sending a large number of SIP messages in a short period to overwhelm the server.

This IP belongs to SingTel.

The IP address attempted to login to the SSH server with an invalid username.

It appeared to be taking part in SSL Stripping attacks, downgrading secure HTTPS connections to facilitate eavesdropping.

A dangerous data surveillance spyware was tied back to this IP.

It initiated insecure direct object references (IDOR) attacks to bypass authorization and directly access SSH resources.

Repeated attempts to exploit known vulnerabilities in server software.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

It was flagged initiating reflective (DRDoS) attacks, intending to exhaust our server resources.

The IP attempted to login to the POP3 server with an invalid username.

The IP attempted to send malware-infected attachments from the Postfix server.

The IP was involved in a VoIP Hopping attack, jumping from one VoIP network to another to avoid detection or gain unauthorized access.

The IP attempted to register as an Asterisk user with no password.

Multiple unsuccessful attempts to escalate privileges or access root account.

The IP attempted to use the FTP server to distribute hacking tutorials.

Signs of CSRF Attacks: Logs demonstrating HTTP GET requests with sensitive actions that should ideally require POST requests.

This IP belongs to DigitalOcean.

This IP belongs to Telus Communications.

It attempted to use the Asterisk server as a relay for calls to premium-rate numbers.

This IP belongs to Citigroup.

This IP belongs to Proximus.

This IP belongs to TJX.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.