It attempted to perform a dictionary attack on the SASL server.

The IP made multiple unsuccessful login attempts to the POP3 server in a short period of time.

It appeared to be taking part in SSL Stripping attacks, downgrading secure HTTPS connections to facilitate eavesdropping.

It attempted to perform a replay attack on the SASL server.

This IP had been flagged for attempting to manipulate server behaviour by injecting shellcodes.

This IP belongs to Home Depot.

This IP belongs to Twenty-First Century Fox.

The IP was reported for spamming activities, sending unsolicited emails or messages that often contain phishing links or malware.

Incidents of privacy-invasive software floating in our network were linked to this IP.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

Requests to non-existent endpoints (indicating potential reconnaissance activity).

This malicious IP was reported for attempting to initiate a large number of simultaneous calls, a sign of a potential DDoS attack.

This IP belongs to Amazon Web Services.

Repeated attempts to access rarely used or hidden services on the server.

This IP belongs to Alphabet.

Multiple requests to the server's robots.txt file.

It attempted to carry out a 'Ping of Death' operation, hoping to crash the server.

The IP attempted to perform a Fraggle attack on the SSH server.

Signs of Password Spraying: Logs showing single failed login attempt for large numbers of users.

It attempted to exploit known vulnerabilities in the Postfix software.

Signal of DDoS Attacks: Multiple IP addresses sending a significantly high volume of traffic.

This IP belongs to Bell Canada.

Repeated attempts to access the server using insecure or deprecated methods.

Unusual User-Agent: Logs show requests with abnormal, uncommon or non-standard User-Agent strings.

The IP conducted exhaustive dictionary attacks, trying to guess password and username combinations.