It attempted to send emails with malicious links from the Mail server.

The IP was engaged in email append attacks, trying to add addresses to an existing email or response mid-transit.

Made various attempts at a forged return-path attack, attempting to spoof their source email address.

This IP belongs to Marathon Petroleum.

The IP was involved in attempts of defacing the Apache server website.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

It systematically tried to exploit IMAP and POP3 vulnerabilities present in our mail service setup.

This IP made wrongful manipulations indicating the operation of malicious downgrader.

Attempted to conduct numerous data harvesting strategies to gather sensitive user data.

The IP attempted to send malware-infected attachments from the Mail server.

The IP attempted to use the FTP server to distribute hacking tutorials.

This IP belongs to New York Life Insurance.

This IP belongs to McKesson.

It attempted to use the FTP server to distribute SQL injection tools.

The IP attempted to use the Mail server to relay spam to other servers.

This IP directed malicious network traffic to our servers with the intent to crash them.

The IP made multiple requests with the same DNT header.

The IP actively participated in snowshoe spamming, spreading its spam output across many IPs and domains to avoid detection.

Multiple requests with identical Accept-Encoding headers.

The IP tried to initiate DNS tunneling for smuggling data through SSH.

GET /backup.sql: Attempting to access a backup of your database.

It attempted to perform a SIPVicious scan on the Asterisk server.

This IP belongs to Fannie Mae.

It attempted to download sensitive files from the FTP server.

The IP attempted to use the Mail server to relay malware-infected attachments to other servers.