This IP belongs to JPMorgan Chase.

The IP attempted to perform a man-in-the-middle attack on the SASL server.

Repeated attempts to access the server using old or outdated software versions, which might have known vulnerabilities.

This IP was seen trying to perform a SIP URI Spoofing attack, falsifying the SIP URI to deceive the receiver or hide the caller's identity.

It attempted to use the IMAP server to relay spam.

The IP attempted to perform Remote File Inclusion (RFI) attacks on the Apache server.

It attempted to use the FTP server to distribute encryption tools.

Multiple attempts to access the server using credentials of inactive or seldom-used accounts.

The IP attempted to exploit a mail server's greylisting functionality to bypass spam filters.

Multiple login attempts using common or easily guessable passwords (like 'password123', 'admin', etc.).

This IP belongs to Exelon.

This IP belongs to Telefonica Spain.

The IP attempted to exploit a mail server's greylisting functionality to bypass spam filters.

This IP belongs to Procter & Gamble.

This IP belongs to Charter Communications.

This IP belongs to Chevron.

It attempted to send emails from the Mail server that violate the server's acceptable use policy.

It was observed attempting to exploit known vulnerabilities in the IMAP protocol.

Unusual increase in server CPU usage.

This IP belongs to Telus Communications.

Multiple requests with the same X-Att-Deviceid header.

Rudimentary attempts were made by this IP to execute Man-in-the-Browser attacks.

The malicious IP was involved in a credential stuffing attack, using stolen username-password combinations to gain unauthorized access.

GET /call?function=shell_exec&var=ls: Attempting remote code execution.

The reported IP was identified as a BadBot, engaging in harmful activities such as unauthorized web scraping and data mining.