Repeated attempts to access the server using insecure or deprecated methods.

It attempted to use the Postfix server to relay phishing emails to other servers.

This IP belongs to CVS Health.

This IP was associated with targeted spear phishing attempts against our senior staff.

The IP has initiated several exploits, specifically for software vulnerabilities.

Reverse Tabnabbing Attempts: Logs illustrating target="_blank" in URL, which is a sign of reverse tabnabbing attempt.

It made successive tries to alter SMTP relay configurations to send unsolicited emails.

It attempted to perform Race Condition attacks on the Apache server.

The IP performed regular system foot printing to gain intel on weak points in our server.

This IP belongs to Baidu.

Multiple requests to the password reset page.

GET /login.action: Trying to find a Struts2 application to exploit.

It attempted to use the FTP server to distribute zombie network tools.

The IP attempted to perform a brute force attack on the SASL server.

This IP belongs to Tyson Foods.

This IP belongs to Anthem.

The malicious IP attempted to exploit server misconfigurations to gain higher-level access.

This IP belongs to Costco Wholesale.

The IP attempted to send emails from the IMAP server without authorization.

This IP belongs to Berkshire Hathaway.

This IP belongs to Reliance Jio.

This IP belongs to TELUS Communications.

It attempted to send emails with malicious links from the Postfix server.

The IP attempted a DLL injection attack, hoping to execute malicious code within our SSH processes.

It attempted to send emails with malicious links from the Postfix server.