It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

Multiple failed login attempts using different usernames.

This IP belongs to Shopify.

It engaged in mail bombing, flooding the server with large amounts of insignificant mails.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

The IP attempted to mark emails as read on the POP3 server without authorization.

The IP was involved in a toll fraud attack, making long-distance calls without authorization, leading to high charges.

POST /user/register: An attempt to register a new user or brute force the user registration form.

This IP belongs to Telstra.

The IP made multiple requests with the same Proxy-Authorization header.

The IP address attempted to exploit known vulnerabilities in the Apache server software.

The malicious IP was suspected of cryptojacking, illicitly using others' computing resources to mine cryptocurrencies.

Code Injection: Usage of standard codes (like Base64) to obscure attack payloads or commands.

The IP attempted to send spam emails from the Mail server.

It attempted to perform a Chargen amplification attack on the SSH server.

This IP was reported for attempting a Man-in-the-Middle attack, intercepting and potentially altering communication between two parties.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

POST /dav/addressbook?add.vcf: Trying to exploit CardDAV servers to store and spread malware.

The IP was seen engaging in a Slowloris attack, holding as many connections to the target web server open for as long as possible, eventually overloading the server.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

This IP belongs to Caterpillar.

Attempts to use privileged service accounts outside of their normal usage patterns.

This IP belongs to Marathon Petroleum.

The malicious IP tried to brute force its way into the SASL authentication process.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.