The IP sent numerous VOIP OPTIONS requests in a short time.

This IP belongs to Optus.

Multiple requests with the same X-Csrf-Token header.

This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

This IP belongs to Archer-Daniels-Midland.

The IP performed Covert Timing Channel attacks, gathering information about encrypted SSH traffic by analyzing packet timing.

It sent VOIP requests to non-existent extensions.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

The malicious IP attempted ARP spoofing to fool the server into sending information to the wrong destination.

The IP was seen trying to exploit known vulnerabilities in server software, a common tactic for gaining unauthorized access or control.

This IP belongs to Freddie Mac.

The IP attempted to perform SOAP Injection attacks on the Apache server.

This IP belongs to Optus.

The malicious IP was involved in a vishing attack, using the VoIP server to deceive users into revealing sensitive information.

Multiple requests to the same endpoint in a short period of time.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

The IP was noted for executing SYN flood attacks, purposefully creating half-open connections to deplete server resources.

Evidence of Fast-flux DNS: Rapidly changing DNS responses signifying the presence of a botnet.

It tried to create buffer overflows by sending large amounts of data at once to overwhelm server resources.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

It attempted to exploit known vulnerabilities in the IMAP protocol.

This IP belongs to Google Cloud Services.

The IP was involved in a rapid sequence of login attempts.

This IP belongs to China Mobile.

HEAD /: May be part of a larger Reconnaissance.