It attempted to use the FTP server to distribute identity theft tools.

It attempted to perform a credential stuffing attack on the SSH server.

It attempted to perform a brute force attack on the IMAP server.

Path/File Enumeration: Logs show multiple HTTP requests to non-existing pages and incrementing filenames, suggesting file or path enumeration.

GET /db/finance.dump: An attempt to access a database dump file.

The IP made multiple unsuccessful login attempts to the SSH server in a short period of time.

This IP belongs to AT&T.

We traced a significant increase in the distribution of malicious fake security software to the reported IP.

FOR YOUR INFORMATIONS and ACTIONS against these Basterds HACKERS USING your LOGOS, servers IP and accounts and mails boxes ! Pour votre Information et Actions contre ces hackers utilisant vos LOGOS, serveurs IP et boites mails ! RECEPTION 3 ème mails escrocs usurpant CARREFOUR BANQUE sur les Boites emails à LAPOSTE.net : Bonjour Webmasters de SIGNAL SPAM, de CARREFOUR BANQUE, et LA POSTE.net, and FBI Services in hidden copy ( https://complaint.ic3.gov/default.aspx ) Mercredi 31 Juillet 2025 après 07h20 (toujours envoyés les nuits, ou tôt les matinées, les week-ends, ou avant les ouvertures ou après le fermetures des Bureaux et Administrations en France )( méthodes d’escrocs et de faux culs ) j'ai reçu sur ma boite email ce 3 ème mails ci-dessous d’escroquerie usurpant encore CARREFOUR BANQUE et venant cette fois-ci de l'adresse email d’escroquerie: debborane@mysds.henkel.com gérée par domainabuse@cscglobal.com L’adresse IP utilisée par ces batards de hackers fous est: 24.237.81.115 gérée par security@gci.net Received : from 115-81-237-24.gci.net (115-81-237-24.gci.net [24.237.81.115]) by mlpnf0112.laposte.net (SMTP Server) with ESMTP id 4bsLBy2WPhz1lt84; Wed, 30 Jul 2025 07:20:25 +0200 (CEST) Content-Type : multipart/mixed; boundary="===============4481039027995804923==" MIME-Version : 1.0 From : "Guide" <debborane@mysds.henkel.com> To : contact@laposte.net Subject : CARR£FOUR-ASSISTANC£ BANK2025 IP Lookup Details: IP Information - 24.237.81.115 Host name: 115-81-237-24.gci.net Country: United States Country Code: US Region: Alaska City: Anchorage Latitude: 61.1192 Longitude: -149.8924 Utilisant les adresses IP et adresses emails de la Société GCi.net C'est clairement une tentative d’escroquerie usurpant CARREFOUR BANQUE, je n’ai rien chez eux ! Ci-dessous cet email d’escroquerie avec ces en-têtes complets : *********************** Contenu du mail des hackers fous *********************** CARR£FOUR-ASSISTANC£ BANK2025 • Aujourd'hui, à 07:20 (il y a 2 heures) 6Ko • • • G De : Guide • A : contact@laposte.net

Forceful Browsing: Attempts to access pages or resources without proper navigation.

It attempted to use the FTP server to distribute brute force tools.

This IP was caught distributing malicious APK files.

This IP attempted to distribute malicious Javascript files.

Our system blocked an attempted Code Injection attack from this IP.

This IP belongs to Liberty Mutual Insurance Group.

This IP belongs to China Mobile.

The malicious IP was reported for sending malformed packets to the SIP server, potentially aiming to crash the system.

The IP has been implicated in multiple cases of URL manipulation attempts.

The IP made multiple unsuccessful login attempts in a short period of time.

The malicious IP was involved in a Buffer Overflow attack, sending more data to a buffer than it can handle, causing it to overflow and allowing the attacker to execute arbitrary code.

Executed numerous SQL injection attacks in an attempt to manipulate the server's databases.

The malicious IP was reported for sending a high volume of SIP INVITE requests, a potential sign of a call flooding attack.

This IP belongs to Valero Energy.

It made multiple requests with the same Range header.

This IP was caught conducting cookie-poisoning attack.