This IP belongs to Orange France Telecom.

GET /axis2/axis2-admin/login: Attempt at finding Axis2 web service exploitable applications.

It attempted to use the FTP server to distribute virus creation tools.

It attempted to login to the POP3 server with an invalid password.

This IP belongs to Cox Communications.

GET /server-status: Often an attempt to check Apache server status.

Evidence shows that the IP address has sent a number of deceptive phishing emails to our employees.

Last night, we received an alert regarding this IP attempting to upload keyloggers to our network.

It attempted to send emails from the Postfix server to email addresses that have previously marked emails from the server as spam.

Signs of Clickjacking: You might observe layered multiple HTTP requests aiming to trick users into unintended interactions.

Multiple requests with the same TE (Transfer Encoding) header.

It attempted to send emails from the Mail server to email addresses that have previously marked emails from the server as spam.

This IP belongs to United Parcel Service.

The IP address attempted to login to the SSH server with an invalid username.

It attempted to perform a SIPVicious scan on the Asterisk server.

Multiple requests with identical request parameters.

This IP belongs to Marathon Petroleum.

The IP attempted to use the FTP server to distribute web vulnerability scanning tools.

Excessive Form Submission Attempts: Numerous form submission attempts within a short time, signifying brute-force or captcha bypass attempts.

This IP belongs to Citigroup.

This IP belongs to The Walt Disney Company.

The malicious IP was reported for attempting a Session Teardown attack, sending BYE messages to end SIP sessions prematurely.

The IP attempted to perform a Kad network amplification attack on the SSH server.

This IP was caught circulating email worms, camouflaged as legitimate mails.

This IP was associated with targeted spear phishing attempts against our senior staff.