Just noticed weerd traffic hittin mail server near midnite last night. Source popped up in our headers showin a really random pattern of requests and bounce backs. It tried to probe a bunch of folders in like seconds so I blokced it pronto. Feels like someone spelunckin for unpatched vulnerabilities or unused test accounts. If you run your own instance keep an eye on weird requests you didnt start.