The IP was observed participating in Social Engineering attacks to manipulate individuals into revealing SSH login details.

It utilized Web scrapers, automatically harvesting content from our server.

The IP made multiple requests with identical Accept-Encoding headers.

This IP belongs to Vodacom.

This IP belongs to Archer-Daniels-Midland.

This IP belongs to Costco Wholesale.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

This IP belongs to Twenty-First Century Fox.

This particular IP tried to perform an unauthorized system configuration change.

This IP belongs to Intel.

SPAM From line From infos@extrac.fr Fri Mar 7 04:04:13 2025 Return-Path: <infos@extrac.fr> X-Original-To: contact@data-privacy.fr Delivered-To: contact.data-privacy@saga8mm.com Authentication-Results: saga8mm.com; dkim=pass (2048-bit key; unprotected) header.d=extrac.fr header.i=infos@extrac.fr header.a=rsa-sha1 header.s=mail header.b=PPBGQB2t; dkim-atps=neutral Received: from smtp.extrac.fr (smtp.extrac.fr [136.144.238.41]) by saga8mm.com (Postfix) with ESMTPS id A61187FA93 for <contact@data-privacy.fr>; Fri, 7 Mar 2025 04:04:12 +0100 (CET) Date: Fri, 7 Mar 2025 04:04:09 +0100 Authentication-Results: smtp.extrac.fr; dkim=pass (2048-bit key; unprotected) header.d=extrac.fr header.i=infos@extrac.fr header.b="PPBGQB2t"; dkim-atps=neutral To: contact@data-privacy.fr From: SwissLife <infos@extrac.fr> Reply-To: hubertnombrine@gmail.com Subject: Entrepreneurs, choisissez une protection adaptée à vos besoins Message-ID: <1741316649.d26c3801345c63401959e056b6e7831f@extrac.fr> X-Priority: 3 Disposition-Notification-To: <infos@extrac.fr> X-Confirm-Reading-To: infos@extrac.fr Return-Receipt-To: infos@extrac.fr List-Unsubscribe-Post: List-Unsubscribe=One-Click List-Unsubscribe: <mailto:desabonnement@extrac.fr?subject=Unsubscribe&body=contact@data-privacy.fr>, <https://extrac.fr/retrait/?em=B87iYIpoHa/cWajUckzni9Eoj8OkDGcvYQRO8/0Hd/Jgcnvi9Y5i5ZDKdd/POakefmice+FQdeTGJU0N3ZycQZknT6cg9bIMMobyQRp3k0f5a6ZROvfyQkkXjJJhukEkSxnaQjVbmvHIsy9c8zdcvqOax24AOWwjmkYRoLF2Yxo=> Mime-Version: 1.0 Content-Type: multipart/alternative; boundary="b1_66bef5ba5f5c755e3804afb0f0dd7185" Content-Transfer-Encoding: 8bit DKIM-Signature: v=1; a=rsa-sha1; q=dns/txt; l=41906; s=mail; t=1741316649; c=relaxed/simple; h=From:To:Subject; d=extrac.fr; i=infos@extrac.fr; z=From:=20SwissLife=20<infos@extrac.fr> |To:=20contact@data-privacy.fr |Subject:=20=3D?UTF-8?Q?Entrepreneurs,_choisissez_une_protection_adapt=3DC3=3DA9e_=3DC3=3DA0_vo?=3D=0A=20=3D?UTF-8?Q?s_besoins?=3D; bh=SVtHmvXFmI3a1XyNsjRJ0rUvi3E=; b=PPBGQB2tcenHrfhzXxhqSUFtyjksOMmK441T/hZK8L/Xn8I+GYq+ODGMABFclezOOsjRgpRGdRdUMUt7Cch4Xm5B/NRGRnb9dLdLWoMpSepqlWdEkgaMNEw2aSVLYTGDbWp/2MlwItgiP4knwltiU8lTlUQWbYE4FwCknNhlbbQB7RVI1VsAkHXqiSGopPySSAbKetytFSZkAiYK1/n+hYriyJ21xQtIPdVbVhtdF1z4z+TT05l+e+rm16xL2xdGPeYfOnn5T89/t5r6TKjJQzdYo9YZKCDmEUMm19wcD+sFq6J+QZk/7fPOcz5IPGVf7zzfC2nOrm8SEu4wYcSrvA==

This malicious IP was reported for attempting a Zero-day exploit, exploiting a software vulnerability before it's known or fixed by the vendor.

It attempted to perform Uncontrolled Format String attacks on the Apache server.

The IP was involved in a Directory Traversal attack, attempting to access restricted directories and files.

The IP sent malformed Asterisk requests, potentially indicating an attempt to crash the server.

Attempts to access the server using unusual HTTP methods or request types.

This IP belongs to Bank of America.

This IP belongs to Hong Kong Broadband Network.

The IP attempted to use the Mail server to relay phishing emails to other servers.

This IP belongs to FedEx.

It attempted to use the Asterisk server to perform a reflection DDoS attack.

It attempted mail bombing, trying to overwhelm our mail server with high volumes of email.

It attempted to perform a dictionary attack on the SASL server.

A series of active scareware campaigns was traced back to this IP address.

It conducted an incursion on secure shell (SSH), attempting to tamper with encrypted data.