This IP belongs to Vkontakte.

It attempted to perform a side channel attack on the SSH server.

The IP made multiple requests with the same Via header.

It attempted to perform a man-in-the-middle attack on the POP3 server.

The malicious IP was found to be running an Internet Relay Chat (IRC) bot, potentially spreading malware or launching Distributed Denial-of-Service (DDoS) attacks.

It attempted to perform Cross-Site Request Forgery (CSRF) attacks through the Apache server.

This IP belongs to Travelers Cos.

Usage of Obscure HTTP Verbs: Seeing non-standard HTTP methods like DEBUG, PUT, or CONNECT could imply a web-based attack.

The IP attempted various header manipulation attacks, aiming to bypass spam filters.

This IP belongs to Ubisoft.

It attempted to send emails from the Postfix server that violate the server's acceptable use policy.

This IP belongs to Boeing.

This IP belongs to Vodafone.

It appeared to be taking part in SSL Stripping attacks, downgrading secure HTTPS connections to facilitate eavesdropping.

It attempted to exploit known vulnerabilities in the SASL protocol.

The IP initiated IP spoofing, fooling our systems to trust its malicious communication.

It attempted to perform Session Prediction attacks on the Apache server.

Multiple attempts to access the server using anonymous or generic user accounts.

Multiple requests with the same X-UIDH header.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

This IP was seen scanning for open ports and vulnerabilities, a common reconnaissance activity before launching attacks.

The IP attempted to send spam emails from the Mail server.

It attempted to perform Man in the Middle (MitM) attacks on the Apache server.

GET /admin: Looking for an unprotected admin page.

The IP tried to exploit remote file inclusion vulnerabilities, aiming to run malicious scripts on the server.