Hi, I'm tracking you, watching you, and understand what you're doing!!!! I'm tracking your IP addresses, and they're quite revealing-we're going to share them. We've banned the /dev/shm/es directory and found your .ls... archive.... and cleaned up the jsp files in the public directory. The SNMP daemon is now disabled. Your ksmd in /dev/shm/.lskxqqqywuerwrwerwerss/ds/ksmd (thank's for the ds.tgz) daemon for mining has also been taken down, and we've retrieved your IP addresses!!! DENY 89.116.220.233 # Exploit Postfix CVE-2026-73570 DENY 77.92.145.71 # Exploit Postfix CVE-2026-73570 DENY 67.213.82.18 # Exploit Postfix CVE-2026-73570 DENY 66.116.251.11 # Exploit Postfix CVE-2026-73570 DENY 64.89.161.51 # Exploit Postfix CVE-2026-73570 DENY 5.189.185.197 # Exploit Postfix CVE-2026-73570 DENY 5.188.206.226 # Exploit Postfix CVE-2026-73570 DENY 45.77.42.110 # Exploit Postfix CVE-2026-73570 DENY 211.216.58.204 # Exploit Postfix CVE-2026-73570 DENY 198.20.133.30 # Exploit Postfix CVE-2026-73570 DENY 192.101.68.88 # Exploit Postfix CVE-2026-73570 DENY 172.234.86.122 # Exploit Postfix CVE-2026-73570 DENY 172.105.77.52 # Exploit Postfix CVE-2026-73570 DENY 127.0.1.1 # Exploit Postfix CVE-2026-73570 DENY 104.192.80.183 # Exploit Postfix CVE-2026-73570 DENY 66.116.243.130 DENY 45.113.224.156 DENY 207.180.29.114 DENY 91.92.47.229 # Attaque Zimbra version.txt DENY 89.116.220.39 # Attaque Zimbra version.txt DENY 89.116.171.61 # Attaque Zimbra version.txt DENY 89.116.171.182 # Attaque Zimbra version.txt DENY 89.116.171.113 # Attaque Zimbra version.txt DENY 74.82.47.3 # Attaque Zimbra version.txt DENY 65.49.20.69 # Attaque Zimbra version.txt DENY 65.49.20.67 # Attaque Zimbra version.txt DENY 65.49.1.94 # Attaque Zimbra version.txt DENY 65.49.1.66 # Attaque Zimbra version.txt DENY 64.62.156.24 # Attaque Zimbra version.txt DENY 64.62.156.222 # Attaque Zimbra version.txt DENY 64.62.156.212 # Attaque Zimbra version.txt DENY 45.198.224.228 # Attaque Zimbra version.txt DENY 45.198.224.101 # Attaque Zimbra version.txt DENY 35.224.252.102 # Attaque Zimbra version.txt DENY 198.163.194.111 # Attaque Zimbra version.txt DENY 194.61.120.17 # Attaque Zimbra version.txt DENY 193.32.126.168 # Attaque Zimbra version.txt DENY 184.105.247.254 # Attaque Zimbra version.txt DENY 184.105.247.252 # Attaque Zimbra version.txt DENY 184.105.247.196 # Attaque Zimbra version.txt DENY 184.105.139.69 # Attaque Zimbra version.txt DENY 184.105.139.67 # Attaque Zimbra version.txt DENY 146.19.216.119 # Attaque Zimbra version.txt DENY 136.112.32.76 # Attaque Zimbra version.txt DENY 104.219.239.56 DENY 85.121.177.134 DENY 185.242.3.87 DENY 92.118.39.65 DENY 91.221.191.74 DENY 187.15.89.177 DENY 81.168.109.158 DENY 66.245.218.125 DENY 38.54.50.8 DENY 36.148.184.236 DENY 202.53.148.24 DENY 200.112.221.252 DENY 198.46.142.107 DENY 189.55.192.223 DENY 167.172.73.86 DENY 132.243.238.178 DENY 105.158.146.8 DENY 92.63.180.178 DENY 87.229.64.120 DENY 5.83.143.5 DENY 38.60.162.69 DENY 38.54.95.165 DENY 192.255.193.111 DENY 162.240.176.133 DENY 165.232.71.26 DENY 217.151.99.216 DENY 185.161.17.21 DENY 178.16.53.6 DENY 130.12.181.133 DENY 103.66.198.2 and more .... interesting : 138.197.221.28 138.197.224.124 138.197.226.197 138.197.87.168 138.197.227.219 138.197.227.50 138.197.226.251 138.197.228.86 138.197.231.229 138.197.231.104 138.197.229.235 138.197.231.30 138.197.234.11 138.197.232.218 138.197.234.41 138.197.234.90 138.197.234.23 138.197.96.74 138.197.236.188 138.197.236.245 138.197.238.255 138.197.240.157 138.197.236.4 138.197.240.8 .... and more !!!! 185.209.228.162 DENY OUT Anywhere Ohhhhhh !!! Your tool and your archive are in /dev/shm/.lskxqqqywuerwrwerwerss/. Interestingly, we have kept all the evidence of the attack, and it will be turned over to the authorities: 0702df28.jsp aadwa.jsp config.jsp info.jsp version2.txt version.txt zimmbox.jsp The LDAP and MySQL passwords have been changed, as have all our user passwords. Best regards, and have a great day God loves us and loves each one of you; may God bless you anyway