Multiple requests with the same If-None-Match header.

The IP was reported for attempting a DNS Amplification attack, exploiting vulnerabilities in domain name servers to turn initially small queries into much larger payloads.

It attempted to perform a credential stuffing attack on the SASL server.

This IP belongs to Wikimedia Foundation.

This IP belongs to Nike.

It attempted to send emails with malicious links from the Mail server.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

Multiple requests with identical cookies.

This IP belongs to Liberty Mutual Insurance Group.

This IP belongs to GitHub.

The IP attempted to use the FTP server to distribute credit card fraud tools.

This IP executed mass-probing of various ports to seek vulnerabilities.

Initiated a Zero-day attack, exploiting unknown vulnerabilities in our Mail and Postfix services.

The IP was seen attempting a Dictionary attack on the FTP server, systematically entering every word in a dictionary as a password to find the correct one.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

This IP belongs to Bank of America.

The IP attempted to use the FTP server to distribute forensics tools.

The IP attempted to send emails from the Postfix server to blacklisted email addresses.

The IP attempted to use the SSH server to relay data to other systems.

The IP attempted to manipulate trusted authorities by conducting SSL strip attacks.

Attempts to use default or common usernames and passwords, a common tactic in brute force attacks.

It attempted to send emails with malicious links from the Postfix server.

It attempted to perform a SIPVicious scan on the SIP server.

The IP attempted to mark emails as read on the POP3 server without authorization.

It actively sought to exploit unpatched software within our server applications.