This IP was associated with targeted spear phishing attempts against our senior staff.

The IP made multiple unsuccessful login attempts to the IMAP server in a short period of time.

Fileless malware dissemination has been observed from this IP address.

It attempted to move emails to different folders on the IMAP server without authorization.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

Our firewall recorded intrusion attempts originating from this suspicious IP.

GET /db/finance.dump: An attempt to access a database dump file.

It attempted to use the Postfix server to relay spam to other servers.

This IP belongs to Telkom SA.

50.101.216.33

The IP address attempted to login to the SSH server with an invalid username.

This malicious IP was reported for attempting to initiate a large number of simultaneous calls, a sign of a potential DDoS attack.

It attempted to perform a brute force attack on the POP3 server.

The IP made multiple unsuccessful login attempts to the Postfix server in a short period of time.

POST /WebResource.axd: Attempting to exploit a known .NET vulnerability.

Uncommon Referer Header: HTTP logs record requests from an uncommon or suspicious 'Referer' header.

This IP belongs to Pinterest.

This IP belongs to MTS (Mobile TeleSystems).

This IP belongs to Caterpillar.

It attempted to perform a SIP Brute Force attack on the SIP, VOIP, or Asterisk server.

The IP attempted to send emails with misleading headers from the Mail server.

It attempted to list the contents of directories that it should not have access to.

The IP attempted to perform XML External Entity (XXE) attacks on the Apache server.

Command Injection in Requests: Logs indicate HTTP requests with Unix or Windows command-line instructions.