It initiated multiple account lockouts in a short period.

FOR YOUR INFORMATIONS and ACTIONS against these Basterds HACKERS USING your servers IP and accounts and mails boxes ! Pour votre Information et Actions contre ces hackers utilisant vos LOGOS, serveurs IP et boites mails ! Recu 7ème mails escrocs usurpant CETELEM sur les Boites emails à La POSTE.net : Bonjour Webmasters de SIGNAL SPAM, de CETELEM, et LA POSTE.net, Ce Lundi 30 Juin 2025 après 13h38 (et souvent aussi envoyés les nuits, ou tôt les matinées, ou les week-ends, avant ou après les ouvertures des Bureaux et Administrations en France )( méthodes d’escrocs et de faux culs ) j'ai reçu ce 7 ème mails ci-dessous d’escroquerie usurpant CETELEM et venant cette fois-ci de l'adresse email d’escroquerie: lananorde@cyncsupport.gelighting.com gérée par domain.admin@ge.com L’adresse IP utilisée par ces batards de hackers fous est: 65.74.83.231 gérée par abuse@gci.net Received : from 231-83-74-65.gci.net (231-83-74-65.gci.net [65.74.83.231]) by mlpnf0113.laposte.net (SMTP Server) with ESMTP id 4bW40q15VjzYcnL; Mon, 30 Jun 2025 13:38:18 +0200 (CEST) Content-Type : multipart/mixed; boundary="===============5448760500630099117==" MIME-Version : 1.0 From : "GESTION-MAIL" <lananorde@cyncsupport.gelighting.com> To : contact@laposte.net Subject : (2025)CLIENTS©CETEL£M-Fr IP Lookup Details: IP Information - 65.74.83.231 Host name: 231-83-74-65.gci.net Country: United States Country Code: US Region: Alaska City: Kodiak Station Latitude: 57.6036 Longitude: -153.3751 utilisant ENCORE les adresses IP et serveurs mails de la Société GCI.net C'est clairement une tentative d’escroquerie usurpant CETELEM, je n’ai rien chez eux ! Ci-dessous cet email d’escroquerie avec ces en-têtes complets : *********************** Contenu du mail des hackers fous *********************** (2025)CLIENTS©CETEL£M-Fr • Aujourd'hui, à 13:38 (il y a 2 heures) 6Ko • • • G De : GESTION-MAIL • A : contact@laposte.net • Cher(e) Client(e) Vous avez une demande en attente dans votre espace Veuillez procéder à la confirmation ou annuler la demande avant qu’elle n’expire. Cliquez sur le bouton ci-dessous pour accéder : Nous vous remercions de votre confiance, Cordialement,

The malicious IP was identified trying to leverage the Postfix service to send bulk spam emails.

Server Scanning for Software Version: Influx of HTTP requests attempting to detect software version running on the server.

This IP belongs to American Express.

Tried to carry out a rainbow table attack, attempting to crack hashed passwords.

Participated in the notorious Water Torture attack to overload our DNS servers.

It attempted to list the contents of directories that it should not have access to.

This IP belongs to America Movil.

Unauthorized HTTP Method Usage: Logs showing unauthorized methods being attempted on the server, like TRACE or PATCH.

It conducted Rainbow table attacks, which use precomputed tables for reversing hash functions.

Remote Execution Attempts: Logs showing unusual terminal commands or scripts run through web access.

Multiple failed login attempts from the same IP address in a short span of time.

It attempted to perform a brute force attack on the POP3 server.

This malicious IP was reported for trying to perform a Man-in-the-Middle attack, intercepting and potentially altering communication between the FTP server and its clients.

The IP address has been flagged for multiple attempts to deliver drive-by-download attacks.

The IP address attempted to login to the SSH server with an invalid username.

The IP attempted 'DLL Injection' to alter the server's behavior in a malicious manner.

This IP belongs to Target.

The IP was involved in a FTP Spam attack, using the FTP server to distribute unsolicited emails or messages.

Rapid sequence of login attempts.

This IP belongs to Target.

Bogus pop-ups irritating our end-users were found to be released by this infamous IP.

The IP tried launching Server Query Flooding to overwhelm our server with requests.

This IP belongs to JPMorgan Chase.