It attempted to perform a SIP Register Flood on the SIP server.

This IP is linked to the distribution of commercial keyloggers designed to capture users' keystrokes.

Frequent access requests from user agents that are known to be associated with malicious tools or bots.

This IP belongs to Globe Telecom.

The IP made multiple unsuccessful login attempts in a short period of time.

This IP belongs to DigitalOcean.

It attempted to use the FTP server to distribute hacking tools.

Spear Phishing Attempts: Rare but possible to find indicators of spear-phishing campaigns targeting your employees or users.

The IP executed URL Obscuring, hiding malicious URLs within seemingly innocent mail links.

This IP belongs to IBM.

This IP belongs to NTT Docomo.

SQL Injection in HTTP Requests: Logs record HTTP requests that contain SQL statements. Possible strings could include 'SELECT *' or 'DROP TABLE', indicative of a SQL injection attack.

The IP attempted to perform a replay attack on the SSH server.

It attempted to use the SIP server to perform a reflection DDoS attack.

This IP belongs to Pfizer.

The IP tried to perform a cross-site request forgery attack on the IMAP service.

The IP attempted to perform a VOIP Hopper scan on the SIP server.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

It attempted to flood the VOIP server with REGISTER requests.

Print Requests Repeatedly: Logs illustrate HTTP requests with "?print" parameter multiple times, indicating someone trying to expose sensitive information.

It attempted to perform a SIPVicious scan on the Asterisk server.

This IP belongs to Vodafone.

Greetings neighbors! Just desired to present myself??”I'm the content owner of a new drywall repair business concentrated in coastal homes here in California. ???? Whether you're coping with wear from the salty air or just in required of some common repairs, my team and I are here to help. We understand the special challenges that come with living by the ocean, and we're committed to offering solutions that hold the test of time. So if you're a homeowner in demand of some drywall expertise, look no more! Let's work together to keep those walls looking their best. ??? 

HTTP Splitting/Smuggling: Logs indicate HTTP requests that include encoded characters like '%0d%0a' (CRLF characters), which is a sign of HTTP Splitting/Smuggling attacks.

This IP belongs to Procter & Gamble.