Malicious IP's involved in Hafnium Exchange Server Attack The IPs were aggregated from various sources, can be used to check IIS Logs for IOC.