brute force attack

192.99.15.15

So, I detected a brute force attack that seems to stem from or involve zMeU. The best I can tell, they didn't get in, but I'm getting what appears to be private IP addresses in my apache logs. How are they accessing private IP addresses when they appear not to know what's on my server?