This IP belongs to SK Broadband.

By launching ApacheKiller attacks, the IP aimed to cause a Denial of Service by exhausting memory resources.

Unusual command line activities that are not typical for the server environment.

FOR YOUR INFORMATIONS and ACTIONS against these Basterds HACKERS USING your servers IP and accounts and mails boxes ! Bonjour Webmasters de AMENDES.GOUV.FR, Signal Spam, La Poste.net, Et celà continue encore et toujours en Septembre 2025 ! Ce Jeudi 04 Septembre 2025 après 15h41 j'ai reçu sur ma boite email LA POSTE.net 3 ème mails escrocs ci-dessous avec faux contenu AMENDES.GOUV.FR ( ANTAI ) venant de l'adresse email bidon: heye@wave.fr gérée par abuse@ovh.net Mais vraie adresse mail pour répondre aux hackers: Reply-To : adm@aca.fr gérée par tech@ovh.net Les adresses IP du PC de ce(s) hacker(s) fou(s) en cause sont: 94.67.239.178 gérée par abuse@ote.gr Received : from orange.gtfribgkwk0e3c0q3fhoqn45gf.parx.internal.cloudapp.net (ppp-94-67-239-178.home.otenet.gr [94.67.239.178]) by mlpnf0110.laposte.net (SMTP Server) with ESMTP id 4cHgc61sTdz1nrwL for <@laposte.net>; Thu, 4 Sep 2025 15:41:10 +0200 (CEST) Content-Type : text/html; charset="iso-8859-1" MIME-Version : 1.0 Content-Transfer-Encoding : quoted-printable Content-Description : Mail message body Subject : Payer un infraction en ligne : ANTAI.goµv.fr C'est visiblement et clairement une tentative d’escroquerie !

The IP attempted to perform a Kad network amplification attack on the SSH server.

This IP belongs to Swisscom.

It exploited CVE-specific server vulnerabilities as a backdoor entrance to our mail system.

It attempted to use the FTP server to distribute encryption tools.

The IP was seen trying to perform a Spoofing attack, falsifying its IP address to deceive the FTP server.

This IP belongs to Phillips 66.

GET /xampp/phpmyadmin/: A threat actor trying to access unprotected phpMySQL instances tied to XAMPP installations.

This IP belongs to Exxon Mobil.

The IP attempted Forceful Browsing, trying to discover hidden directories or files which could contain SSH access data.

This IP belongs to Phillips 66.

The IP sent numerous SIP OPTIONS requests in a short time.

This malicious IP was reported for attempting a man-in-the-middle attack on the VoIP server, intercepting and potentially altering communication.

It attempted to use the FTP server to distribute password cracking tools.

It attempted to perform XPath Injection attacks on the Apache server.

The IP tried to launch 'Dark Tequila' malware that steals banking information and login credentials from the server.

The IP showed unusual patterns in referrer URLs.

This IP belongs to IBM.

The IP address attempted to login to the FTP server with an invalid username.

Unknown source code changes in our system were linked back to this offensive IP address.

The IP attempted to mark emails as read on the IMAP server without authorization.

It sent VOIP requests to non-existent extensions.