This IP belongs to General Motors.

GET /wp-login.php: Indicating an attempt to access a WordPress login page.

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

This IP belongs to Linode.

This IP was involved in a Remote File Inclusion (RFI) attack, exploiting a vulnerability to execute malicious scripts from a remote server.

It executed directory traversal attempts to access unauthorized directories / folders in our server.

Repeated attempts to perform actions that are typically restricted, such as creating or modifying user accounts.

Repeated attempts to exploit known vulnerabilities in server software.

It attempted to make unauthorized calls using the VOIP server.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

The malignant IP conducted a Reflector attack, using third-party servers to amplify the attack traffic towards our server.

This malicious IP was reported for attempting a Session Hijacking attack, exploiting a valid computer session to gain unauthorized access to information or services.

The IP attempted to perform a DNS amplification attack on the SSH server.

It actively attempted to employ session-splicing techniques, interacting with multiple SSH sessions simultaneously to smudge its attack trace.

Incidents of privacy-invasive software floating in our network were linked to this IP.

It's observed that the IP operated a series of attacks exploiting insecure direct object references.

Server Misconfiguration Exploitation: Logs illustrating attempts at exploiting known server misconfigurations.

The IP attempted to exploit Buffer Overflow vulnerabilities on our server.

We noticed the IP attempting to compromise our IoT devices by spreading IoT malware.

It was caught injecting malicious code into the SSH session attempting to compromise server integrity.

This IP belongs to JPMorgan Chase.

This malicious IP was reported for attempting to initiate a large number of simultaneous calls, a sign of a potential DDoS attack.

GET /internal/: Browsing an internal directory.

Unwanted Web Crawler Activity: Observing unusual frequent requests from a known web crawler not granted to scan your site.

The IP was seen trying to perform a TDoS (Telephony Denial of Service) attack, flooding the VoIP server with calls to make it unavailable to users.