Server Side Request Forgery Attempts: Logs may show HTTP requests attempting to manipulate the server into making unintended requests.

It utilized Web scrapers, automatically harvesting content from our server.

The IP attempted code injection attacks, injecting malicious codes in HTTP headers.

The IP attempted to perform Cross-Site Scripting (XSS) attacks through the Apache server.

This IP belongs to Target.

POST /user/register: An attempt to register a new user or brute force the user registration form.

The IP attempted to perform Session Hijacking attacks on the Apache server.

The malicious IP was found trying to exploit the IMAP 'unselect' vulnerability.

The IP made multiple requests with the same TE header.

The malicious IP was reported for attempting to reroute calls through the SIP server, a tactic often used to commit toll fraud.

Login attempts from foreign IP addresses.

The IP made multiple unsuccessful login attempts to the IMAP server in a short period of time.

It tried to execute a Rainbow Table attack, aiming to break the encryption used in SSH password protection.

The IP made multiple requests to the password reset page.

Distributed session hijackers from the IP were designed to capture and exploit web browser sessions.

Ping of Death: Logs showing oversized ICMP requests could suggest Ping of Death attacks.

The IP was part of an IRC-Bot network, a type of botnet that uses the Internet Relay Chat (IRC) protocol.

FOR YOUR INFORMATIONS and ACTIONS against these Basterds HACKERS USING your LOGOS, servers IP and accounts and mails boxes ! Pour votre Information et Actions contre ces hackers utilisant vos LOGOS, serveurs IP et boites mails ! Recu 4 ème mails escrocs usurpant CARREFOUR BANQUE sur les Boites emails à LAPOSTE.net : Bonjour Webmasters de SIGNAL SPAM, de CARREFOUR BANQUE, et LA POSTE.net, and FBI Services in hidden copy ( https://complaint.ic3.gov/default.aspx ) Dimanche 17 Aout 2025 après 11h11 (toujours envoyés les nuits, ou tôt les matinées, les week-ends, ou avant les ouvertures ou après le fermetures des Bureaux et Administrations en France )( méthodes d’escrocs et de faux culs ) j'ai reçu sur ma boite email ce 4 ème mails ci-dessous d’escroquerie usurpant encore CARREFOUR BANQUE et venant cette fois-ci de l'adresse email d’escroquerie: banvo@mysds.henkel.com gérée par domainabuse@cscglobal.com L’adresse IP utilisée par ces batards de hackers fous est: 63.140.101.36 gérée par abuse@acsalaska.net Received : from 63-140-101-36-radius.dynamic.acsalaska.net (63-140-101-36-radius.dynamic.acsalaska.net [63.140.101.36]) by mlpnf0108.laposte.net (SMTP Server) with ESMTP id 4c4VSP6Y50znTV8; Sun, 17 Aug 2025 11:10:44 +0200 (CEST) Content-Type : multipart/mixed; boundary="===============4643936300075276044==" MIME-Version : 1.0 From : "Les informations" <banvo@mysds.henkel.com> Utilisant les adresses IP et adresses emails de la Société acsalaska.net

This IP belongs to Citigroup.

This IP belongs to FedEx.

A series of active scareware campaigns was traced back to this IP address.

The IP attempted to use the FTP server to distribute DDoS attack tools.

It showed an unusually high number of requests to the login page.

It attempted to use the FTP server to distribute web proxy tools.

Multiple requests from user agents claiming to be bots (e.g., Googlebot) that do not match known bot IP ranges.