The IP made multiple requests with identical Accept-Encoding headers.

Smuggling Attack: Logs showing a single IP initiating multiple sessions, implying a Smuggling Attack.

This malicious IP was reported for trying to exploit known vulnerabilities in the FTP server software, potentially to gain control over the server.

This IP has been marked as the origin of numerous SQL injection attacks.

FOR YOUR INFORMATIONS and ACTIONS against these Bastards HACKERS USING your servers IP, accounts and mails boxes ! Pour votre Information et Actions contre ces hackers utilisant vos serveurs IP, comptes et boites mails ! Recu 5ème mail escroc usurpant la Banque NICKEL avec utilisation des serveurs mails zohomail360.com et adresse IP 136.143.188.151 gérée par abuse@zohocorp.com et fbl@zohocorp.com Recu Samedi 30 Novembre 2024 après 17h54 ( mails escrocs toujours envoyés les nuits ou week-ends ) 5ème mail ci-dessous usurpant encore la banque NICKEL et venant de la boite mail bidon ou usurpée: support@pickupmanng.ng Received : from sender4-g3-151.zohomail360.com (sender4-g3-151.zohomail360.com [136.143.188.151]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange X25519 server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mlpnf0112.laposte.net (SMTP Server) with ESMTPS id 4Y0x3p2Kgyz1lt87 for <@laposte.net>; Sat, 30 Nov 2024 17:54:46 +0100 (CET) ARC-Seal : i=1; a=rsa-sha256; t=1732985685; cv=none; d=us.zohomail360.com; s=zohoarc; avec utilisations des serveurs zohomail360.com et adresse IP 136.143.188.151 gérée par abuse@zohocorp.com et fbl@zohocorp.com IP Lookup Details: IP Information - 136.143.188.151 Host name: sender4-g3-151.zohomail360.com Country: United States Country Code: US Region: TX City: Houston Latitude: 29.7702 Longitude: -95.3628

The IP attempted to exploit known vulnerabilities in the SIP protocol.

GET /.git/config: Trying to access source code or repository configuration information.

Our team traced back the IP responsible for multiple mobile device tracking software distributions.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

It attempted to exploit known vulnerabilities in the FTP protocol.

The IP made repeated attempts to authenticate with the SIP server using different usernames.

Repeated failed attempts to perform actions that require higher privileges.

The IP distributed unrequested software, secretly stealing user data while posing as useful tools.

Multiple requests to the server's robots.txt file.

It attempted to send emails with deceptive subject lines from the Postfix server.

It attempted to flood the Asterisk server with REGISTER requests.

This IP belongs to Anthem.

It showed unusual patterns in the sequence of requests.

The IP partook in Drive-by attacks, embedding malicious scripts on benign websites.

It pushed humongous quantities of spam emails through our server, aiming to congest our email services.

The IP attempted to send emails from the Mail server that violate the server's email sending limits.

The IP attempted several directory traversal attacks, aiming to access files beyond the root directory.

It utilized Web scrapers, automatically harvesting content from our server.

It showed an unusually high number of requests to the login page.

The IP was involved in a toll fraud attack, making long-distance calls without authorization, leading to high charges.