This IP belongs to Dell Technologies.

The IP attempted to perform a SIP Invite Flood on the Asterisk server.

Multiple requests with the same If-Match header.

This IP belongs to PepsiCo.

It sent SIP INVITE requests to non-existent extensions.

The IP initiated SYN flooding attacks, aiming to disrupt service by overwhelming the server.

It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

The IP made multiple requests with the same Proxy-Authorization header.

The IP attempted to perform XML Attribute Blowup attacks on the Apache server.

Remote Execution Attempts: Logs showing unusual terminal commands or scripts run through web access.

This IP belongs to Verizon.

Participated in the notorious Water Torture attack to overload our DNS servers.

It tried to execute Privilege Escalation attacks, trying to gain higher-level access on our server.

It tried to execute dictionary attacks on our Mail service causing potential delays.

This IP belongs to Archer-Daniels-Midland.

This IP belongs to Telkom SA.

POST /xmlrpc.php: Could indicate an attempt at exploiting the WordPress xmlrpc.php file, often used for brute forcing.

GET /phpMyAdmin: This could be a threat actor looking for an unsecured phpMyAdmin page.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.

The IP attempted to perform Security Misconfiguration attacks on the Apache server.

The IP attempted to perform a brute force attack on the SASL server.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

This IP belongs to Phillips 66.

A series of unusual file transfers originated from this IP.

It made multiple requests with the same Referer header.