The IP performed forceful browsing, to access and exploit unprotected files and directories.

This IP belongs to World Fuel Services.

Several cross-site scripting attacks were traced back to this IP.

This IP belongs to Microsoft Azure.

This IP has been detected spreading notorious credit card skimmers.

POST //user/register?element_parents=timezone/timezone/%23value&ajax_form=1&_wrapper_format=drupal_ajax: Drupalgeddon3 exploit, another Drupal remote execution vulnerability.

The IP was involved in a Ping of Death attack, sending packets larger than the maximum allowed size, causing the system to freeze or crash.

This malicious IP attempted a brute force attack, trying to crack login credentials to gain unauthorized access to a system or account.

The IP attempted to use the POP3 server to relay spam.

The IP attempted to perform a VOIP Hopper scan on the VOIP server.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

It attempted to use the VOIP server to perform a reflection DDoS attack.

This IP belongs to Swisscom.

This IP belongs to SK Broadband.

The IP attempted to login to the SASL server with an invalid username.

It attempted to perform HTTP Parameter Pollution attacks on the Apache server.

The IP was involved in a rapid sequence of login attempts.

It made multiple requests with identical POST parameters.

The IP attempted to download emails from the POP3 server without authorization.

This IP belongs to Twenty-First Century Fox.

The IP attempted to exploit known vulnerabilities in the VOIP protocol.

The IP was caught attempting to execute heap overflow attacks.

This particular IP attempted to exploit vulnerabilities in our web applications.

GET /setup.php: Effort to locate setup files for PHP applications.

Unusual increase in network bandwidth usage.