This IP belongs to Vkontakte.

FOR YOUR INFORMATIONS and ACTIONS against these Basterds HACKERS USING your servers IP and accounts and mails boxes ! Pour votre Information et Actions contre ces hackers utilisant vos serveurs IP, LOGOS, Comptes et boites mails ! Bonjour Webmasters de SIGNAL SPAM, de LA POSTE.net, and FBI Services in hidden copy ( https://complaint.ic3.gov/default.aspx ) Recu Mardi 15 Juillet 2025 après 11h06 (et aussi envoyés les nuits ou les week-ends) 25 èmes mails escrocs ( fautes ) usurpant encore la BANQUE POSTALE et venant de l’adresse mail escroquée des hackers: no_reply10@ceassureleiens.online gérée par abuse@publicdomainregistry.com utilisant encore les serveurs usurpés de MICROSOFT et venant des adresses IP 40.107.160.141 gérées par abuse@microsoft.com Received : from PAUP264CU001.outbound.protection.outlook.com (mail-francecentralazon11021141.outbound.protection.outlook.com [40.107.160.141]) (using TLSv1.3 with cipher TLS_AES_256_GCM_SHA384 (256/256 bits) key-exchange ECDHE (P-384) server-signature RSA-PSS (2048 bits) server-digest SHA256) (No client certificate requested) by mlpnf0117.laposte.net (SMTP Server) with ESMTPS id 4bhCwQ0Jk0zDq6P for <ele.lemoine@laposte.net>; Tue, 15 Jul 2025 11:06:14 +0200 (CEST) ARC-Seal : i=1; a=rsa-sha256; s=arcselector10001; d=microsoft.com; cv=none; ************** Codes HTML des hackers ci-dessous ************ Return-Path : <no_reply10@ceassureleiens.online> Received : from mlpnf0117.laposte.net (mlpnf0117.sys.meshcore.net [10.94.128.96]) by mlpnb0108 with LMTPA; Tue, 15 Jul 2025 11:06:14 +0200 X-Cyrus-Session-Id : cyrus-1752570374-181350-1-2071210887204890020 X-Sieve : CMU Sieve 3.0 ARC-Seal : i=2; a=rsa-sha256; d=laposte.net; s=lpn-wlmd; t=1752570374; cv=pass; b=FYvksheVt+oGtuMHJxkHI3dlD0QeoZPdk/fFol1JJ/hg8nH4D4Ijwx3taKmekp5okF/29dE9jaA c/pz0M8o0xHPFcXe8muGb6L9YyZSli8hHGJV4xwHS7mrUqnNdO9V37J7hXwpX/xL//aQEhYSb3aZ FJEzwqzqQGj+qyFpA3d1E+kbPQofsaqQfW26LlIWZy8iJswwFl3eKM0rE7eo8fgviVHZlq8wswh/ eQ5MrUM43RFIqjAxqRy8TM2+rdBR6ZRStxrLV8cKfW13oHlh5/Z/mgmpg9DmniT0uNCsiI5sGb/B bZfxTN8qNo9Q2R5WGm2vfjLrwgO0Jc0QAxkAPNQ== ARC-Message-Signature : i=2; a=rsa-sha256; c=relaxed/relaxed; d=laposte.net; s=lpn-wlmd; t=1752570374; h=DKIM-Signature:From:To:Subject:Date; bh=7dCdtTlSZ auk4RMtBoK2ko6KDsodlailF4HV7RVxk38=; b=CnkO5ALqh227+ALsTiYyj2V61qRgvzJdpqajk SnC0tZKzo4Fl2spFG7dZzVNVX98Nk9kjY71983QLBjUMsf0asckXe+mNp1/aZpF3lXUU921yP908 alT3HwKay30gX9LNj1vhNYuM/RSFJJ4MapGX3Hm2ABjuWAlR0QTCBEewhMSJm/9I0o5cqIdaLbHv /qo1q82G4KFJIdmvo/yyOwucCU4BDk1sAM/Dcv3KtmkrBgWafBHHPZ+jRU49+xkkV4PEQo2uN0ZL LLFLxk3tVromAloPpxQ92bpZiOXrMv8BEBit6sjzIw4aYPkL+yjy/R0n//de+Fv69PcI4MhNUISe Q== ARC-Authentication-Results : i=2; laposte.net; spf=pass smtp.helo=PAUP264CU001.outbound.protection.outlook.com smtp.mailfrom=no_reply10@ceassureleiens.online; dkim=pass reason="good signature" header.b=FUU4r0 header.d=ceassureleiens.online header.s=selector1; dmarc=none reason="No policy found"; arc=pass header.oldest-pass=0 smtp.remote-ip=40.107.160.141; bimi=skipped reason="non-pass DMARC" X-mail-filterd : {"version":"1.9.1","queueID":"4bhCwQ1RcRzDq6D","contextId": "d500133e-b3fa-4ea5-84f8-f7ba075e1401"} X-ppbforward : {"queueID":"4bhCwQ1RcRzDq6D","server":"mlpnf0117"} Received : from outgoing-mail.laposte.net (localhost.localdomain [127.0.0.1]) by mlpnf0117.laposte.net (SMTP Server) with ESMTP id 4bhCwQ1RcRzDq6D for <lpn000000000000000018870443@back01-mail02-04.lpn.svc.meshcore.net>; Tue, 15 Jul 2025 11:06:14 +0200 (CEST) X-mail-filterd : {"version":"1.9.1","queueID":"4bhCwQ0Jk0zDq6P","contextId": "7a45b930-bef0-4e25-93de-00c718a6bc23"} X-lpn-mailing : SPAM X-lpn-spamrating : 69 X-lpn-spamlevel : low Authentication-Results : laposte.net;

The IP attempted to tamper with our Ad network, conducting fraudulent activities.

It initiated a Phishing attack, making fake requests to the server pretending to be a legit user.

This IP belongs to China Mobile.

This IP belongs to Cisco Systems.

It engaged in a click fraud operation using our server’s communication channels.

This IP has been observed spreading mobile malware, targeting our company application users.

The IP attempted to register with the VOIP server using an invalid username.

It attempted to send emails from the Postfix server that violate the server's acceptable use policy.

This IP belongs to DuPont de Nemours.

This IP belongs to New York Life Insurance.

The IP attempted to register with the VOIP server using an invalid username.

GET /muieblackcat: This is often a precursor for additional scanning and likely attacks.

This IP belongs to Comcast.

Repeated attempts to access the server using insecure or deprecated methods.

Unusual command line activities that are not typical for the server environment.

It attempted to use the FTP server to store illegal content.

Repeated pings or probe requests to the server, indicating a potential reconnaissance effort before the attack.

Repeated attempts to access the server using old or outdated software versions, which might have known vulnerabilities.

This IP belongs to Cox Communications.

This IP belongs to Charter Communications.

The IP attempted to use the Mail server to relay phishing emails to other servers.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

This IP belongs to Softbank.