from mushawe.yoafrica.com ([196.44.176.11])
	by gwayi.yoafrica.com with esmtp (Exim 4.90_1 (FreeBSD))
	(envelope-from <noc@profihost.ag>)
	id 1hgceU-000Hyb-FU
	for abuse@yoafrica.com; Fri, 28 Jun 2019 00:13:58 +0200

from [41.190.32.2] (port=37235 helo=sengwe.yoafrica.com)
	by mushawe.yoafrica.com with esmtp (Exim 4.90_1)
	id 1hgcgl-0002rR-0r
	for abuse@yoafrica.com; Fri, 28 Jun 2019 00:16:19 +0200

from localhost (localhost [127.0.0.1])
	by sengwe.yoafrica.com (Postfix) with ESMTP id 591F977D29C
	for <abuse@yoafrica.com>; Fri, 28 Jun 2019 00:17:32 +0200 (CAT)

No, score=3.002 tagged_above=-999 required=5
	tests=[ANTISPOOF_NAME=5, BAYES_00=-1.9, RCVD_IN_DNSWL_LOW=0.001,
	SPF_HELO_NONE=0.001, ST_P0F_Linux=-0.1]
	autolearn=no autolearn_force=no

from sengwe.yoafrica.com (localhost [127.0.0.1])
	by sengwe.yoafrica.com (Postfix) with ESMTP id 9EB2677D2AE
	for <abuse@yoafrica.com>; Fri, 28 Jun 2019 00:17:26 +0200 (CAT)

from syslog.vms.phoffice.de-nserver.de (syslog.vms.phoffice.de-nserver.de [185.39.223.37])
	by sengwe.yoafrica.com (Postfix) with ESMTPS id 6623D77D2AA
	for <abuse@yoafrica.com>; Fri, 28 Jun 2019 00:17:21 +0200 (CAT)

An attempt to brute-force account passwords over SSH/FTP by a machine in your domain or in your network has been detected. Attached are the host who attacks and time / date of activity. Please take the necessary action(s) to stop this activity immediately. If you have any questions please reply to this email.

Host of attacker: 196.44.191.3 => s35931.broadband.yoafrica.com => yoafrica.com
Responsible email contacts: abuse@yoafrica.com
Attacked hosts in our Network: 185.39.221.114, 178.250.10.70, 178.250.12.34, 178.250.14.31, 37.228.154.14, 178.250.15.149, 77.75.253.87, 85.158.181.16, 37.228.154.88, 37.228.154.134, 77.75.249.212, 37.228.155.73

Logfile entries (time is MET / GMT+1):
Thu Jun 27 23:06:46 2019: user: info service: ssh target: 37.228.154.14 source: 196.44.191.3
Thu Jun 27 23:06:38 2019: user: info service: ssh target: 178.250.14.31 source: 196.44.191.3
Thu Jun 27 23:06:20 2019: user: info service: ssh target: 85.158.181.16 source: 196.44.191.3
Thu Jun 27 23:05:45 2019: user: git service: ssh target: 178.250.12.34 source: 196.44.191.3
Thu Jun 27 23:05:33 2019: user: git service: ssh target: 178.250.10.70 source: 196.44.191.3
Thu Jun 27 23:05:21 2019: user: git service: ssh target: 77.75.249.212 source: 196.44.191.3
Thu Jun 27 23:04:38 2019: user: git service: ssh target: 178.250.14.31 source: 196.44.191.3
Thu Jun 27 23:04:20 2019: user: git service: ssh target: 85.158.181.16 source: 196.44.191.3
Thu Jun 27 23:04:16 2019: user: git service: ssh target: 37.228.154.14 source: 196.44.191.3
Thu Jun 27 23:03:45 2019: user: student service: ssh target: 178.250.12.34 source: 196.44.191.3
Thu Jun 27 23:03:33 2019: user: student service: ssh target: 178.250.10.70 source: 196.44.191.3
Thu Jun 27 23:03:21 2019: user: student service: ssh target: 77.75.249.212 source: 196.44.191.3
Thu Jun 27 23:02:46 2019: user: student service: ssh target: 37.228.154.14 source: 196.44.191.3
Thu Jun 27 23:02:38 2019: user: student service: ssh target: 178.250.14.31 source: 196.44.191.3
Thu Jun 27 23:02:20 2019: user: student service: ssh target: 85.158.181.16 source: 196.44.191.3
Thu Jun 27 23:01:51 2019: user: postgres service: ssh target: 77.75.249.212 source: 196.44.191.3
Thu Jun 27 23:01:45 2019: user: postgres service: ssh target: 178.250.12.34 source: 196.44.191.3
Thu Jun 27 23:01:33 2019: user: postgres service: ssh target: 178.250.10.70 source: 196.44.191.3
Thu Jun 27 23:00:46 2019: user: postgres service: ssh target: 37.228.154.14 source: 196.44.191.3
Thu Jun 27 23:00:38 2019: user: postgres service: ssh target: 178.250.14.31 source: 196.44.191.3
Thu Jun 27 23:00:20 2019: user: postgres service: ssh target: 85.158.181.16 source: 196.44.191.3
Thu Jun 27 22:59:51 2019: user: rpcbind service: ssh target: 77.75.249.212 source: 196.44.191.3
Thu Jun 27 22:59:45 2019: user: rpcbind service: ssh target: 178.250.12.34 source: 196.44.191.3
Thu Jun 27 22:59:33 2019: user: rpcbind service: ssh target: 178.250.10.70 source: 196.44.191.3
Thu Jun 27 22:58:50 2019: user: rpcbind service: ssh target: 85.158.181.16 source: 196.44.191.3
Thu Jun 27 22:58:46 2019: user: rpcbind service: ssh target: 37.228.154.14 source: 196.44.191.3
Thu Jun 27 22:58:38 2019: user: rpcbind service: ssh target: 178.250.14.31 source: 196.44.191.3
Thu Jun 27 22:57:51 2019: user: yap service: ssh target: 77.75.249.212 source: 196.44.191.3
Thu Jun 27 22:57:45 2019: user: yap service: ssh target: 178.250.12.34 source: 196.44.191.3
Thu Jun 27 22:57:33 2019: user: yap service: ssh target: 178.250.10.70 source: 196.44.191.3
Thu Jun 27 22:56:50 2019: user: yap service: ssh target: 85.158.181.16 source: 196.44.191.3
Thu Jun 27 22:56:46 2019: user: yap service: ssh target: 37.228.154.14 source: 196.44.191.3
Thu Jun 27 22:56:38 2019: user: yap service: ssh target: 178.250.14.31 source: 196.44.191.3
Thu Jun 27 22:56:03 2019: user: wordpress service: ssh target: 178.250.10.70 source: 196.44.191.3
Thu Jun 27 22:55:51 2019: user: wordpress service: ssh target: 77.75.249.212 source: 196.44.191.3
Thu Jun 27 22:55:45 2019: user: wordpress service: ssh target: 178.250.12.34 source: 196.44.191.3
Thu Jun 27 22:54:50 2019: user: wordpress service: ssh target: 85.158.181.16 source: 196.44.191.3
Thu Jun 27 22:54:46 2019: user: wordpress service: ssh target: 37.228.154.14 source: 196.44.191.3
Thu Jun 27 22:54:38 2019: user: wordpress service: ssh target: 178.250.14.31 source: 196.44.191.3
Thu Jun 27 22:54:03 2019: user: chef service: ssh target: 178.250.10.70 source: 196.44.191.3
Thu Jun 27 22:53:51 2019: user: chef service: ssh target: 77.75.249.212 source: 196.44.191.3
Thu Jun 27 22:53:45 2019: user: chef service: ssh target: 178.250.12.34 source: 196.44.191.3
Thu Jun 27 22:52:50 2019: user: chef service: ssh target: 85.158.181.16 source: 196.44.191.3
Thu Jun 27 22:52:46 2019: user: chef service: ssh target: 37.228.154.14 source: 196.44.191.3
Thu Jun 27 22:52:38 2019: user: chef service: ssh target: 178.250.14.31 source: 196.44.191.3
Thu Jun 27 22:51:21 2019: user: rl service: ssh target: 77.75.249.212 source: 196.44.191.3
Thu Jun 27 22:51:15 2019: user: rl service: ssh target: 178.250.12.34 source: 196.44.191.3
Thu Jun 27 22:51:03 2019: user: rl service: ssh target: 178.250.10.70 source: 196.44.191.3
Thu Jun 27 22:48:46 2019: user: rl service: ssh target: 37.228.154.14 source: 196.44.191.3
Thu Jun 27 22:48:38 2019: user: rl service: ssh target: 178.250.14.31 source: 196.44.191.3
Thu Jun 27 22:48:20 2019: user: rl service: ssh target: 85.158.181.16 source: 196.44.191.3
Mon Jun 24 22:08:11 2019: user: fletcher service: ssh target: 185.39.221.114 source: 196.44.191.3
Mon Jun 24 22:07:48 2019: user: fletcher service: ssh target: 178.250.15.149 source: 196.44.191.3
Mon Jun 24 22:07:46 2019: user: fletcher service: ssh target: 37.228.155.73 source: 196.44.191.3
Mon Jun 24 22:07:35 2019: user: fletcher service: ssh target: 37.228.154.134 source: 196.44.191.3
Mon Jun 24 22:07:22 2019: user: dev service: ssh target: 37.228.154.88 source: 196.44.191.3
Mon Jun 24 22:06:55 2019: user: dev service: ssh target: 77.75.253.87 source: 196.44.191.3
Mon Jun 24 22:06:11 2019: user: dev service: ssh target: 185.39.221.114 source: 196.44.191.3
Mon Jun 24 22:05:48 2019: user: dev service: ssh target: 178.250.15.149 source: 196.44.191.3
Mon Jun 24 22:05:46 2019: user: dev service: ssh target: 37.228.155.73 source: 196.44.191.3
Mon Jun 24 22:05:35 2019: user: dev service: ssh target: 37.228.154.134 source: 196.44.191.3
Mon Jun 24 22:05:22 2019: user: gladys service: ssh target: 37.228.154.88 source: 196.44.191.3
Mon Jun 24 22:04:55 2019: user: gladys service: ssh target: 77.75.253.87 source: 196.44.191.3
Mon Jun 24 22:04:11 2019: user: gladys service: ssh target: 185.39.221.114 source: 196.44.191.3
Mon Jun 24 22:03:48 2019: user: gladys service: ssh target: 178.250.15.149 source: 196.44.191.3
Mon Jun 24 22:03:46 2019: user: gladys service: ssh target: 37.228.155.73 source: 196.44.191.3
Mon Jun 24 22:03:35 2019: user: gladys service: ssh target: 37.228.154.134 source: 196.44.191.3
Mon Jun 24 22:03:22 2019: user: ubuntu service: ssh target: 37.228.154.88 source: 196.44.191.3
Mon Jun 24 22:02:55 2019: user: ubuntu service: ssh target: 77.75.253.87 source: 196.44.191.3
Mon Jun 24 22:02:11 2019: user: ubuntu service: ssh target: 185.39.221.114 source: 196.44.191.3
Mon Jun 24 22:01:48 2019: user: ubuntu service: ssh target: 178.250.15.149 source: 196.44.191.3
Mon Jun 24 22:01:46 2019: user: ubuntu service: ssh target: 37.228.155.73 source: 196.44.191.3
Mon Jun 24 22:01:35 2019: user: ubuntu service: ssh target: 37.228.154.134 source: 196.44.191.3
Mon Jun 24 22:01:22 2019: user: nl service: ssh target: 37.228.154.88 source: 196.44.191.3
Mon Jun 24 22:00:55 2019: user: nl service: ssh target: 77.75.253.87 source: 196.44.191.3
Mon Jun 24 22:00:11 2019: user: nl service: ssh target: 185.39.221.114 source: 196.44.191.3
Mon Jun 24 21:59:48 2019: user: nl service: ssh target: 178.250.15.149 source: 196.44.191.3
Mon Jun 24 21:59:46 2019: user: nl service: ssh target: 37.228.155.73 source: 196.44.191.3
Mon Jun 24 21:59:35 2019: user: nl service: ssh target: 37.228.154.134 source: 196.44.191.3
Mon Jun 24 21:59:22 2019: user: hath service: ssh target: 37.228.154.88 source: 196.44.191.3
Mon Jun 24 21:58:55 2019: user: hath service: ssh target: 77.75.253.87 source: 196.44.191.3
Mon Jun 24 21:58:11 2019: user: hath service: ssh target: 185.39.221.114 source: 196.44.191.3
Mon Jun 24 21:57:48 2019: user: hath service: ssh target: 178.250.15.149 source: 196.44.191.3
Mon Jun 24 21:57:46 2019: user: hath service: ssh target: 37.228.155.73 source: 196.44.191.3
Mon Jun 24 21:57:35 2019: user: hath service: ssh target: 37.228.154.134 source: 196.44.191.3
Mon Jun 24 21:57:22 2019: user: hurtworld service: ssh target: 37.228.154.88 source: 196.44.191.3
Mon Jun 24 21:56:55 2019: user: hurtworld service: ssh target: 77.75.253.87 source: 196.44.191.3
Mon Jun 24 21:56:11 2019: user: hurtworld service: ssh target: 185.39.221.114 source: 196.44.191.3
Mon Jun 24 21:55:48 2019: user: hurtworld service: ssh target: 178.250.15.149 source: 196.44.191.3
Mon Jun 24 21:55:46 2019: user: hurtworld service: ssh target: 37.228.155.73 source: 196.44.191.3
Mon Jun 24 21:55:35 2019: user: hurtworld service: ssh target: 37.228.154.134 source: 196.44.191.3
Mon Jun 24 21:55:22 2019: user: admin service: ssh target: 37.228.154.88 source: 196.44.191.3
Mon Jun 24 21:54:55 2019: user: admin service: ssh target: 77.75.253.87 source: 196.44.191.3
Mon Jun 24 21:53:41 2019: user: admin service: ssh target: 185.39.221.114 source: 196.44.191.3
Mon Jun 24 21:53:35 2019: user: admin service: ssh target: 37.228.154.134 source: 196.44.191.3
Mon Jun 24 21:53:22 2019: user: misiek service: ssh target: 37.228.154.88 source: 196.44.191.3
Mon Jun 24 21:53:18 2019: user: admin service: ssh target: 178.250.15.149 source: 196.44.191.3
Mon Jun 24 21:53:16 2019: user: admin service: ssh target: 37.228.155.73 source: 196.44.191.3
Mon Jun 24 21:51:55 2019: user: misiek service: ssh target: 77.75.253.87 source: 196.44.191.3
Mon Jun 24 21:50:11 2019: user: misiek service: ssh target: 185.39.221.114 source: 196.44.191.3
Mon Jun 24 21:49:18 2019: user: misiek service: ssh target: 178.250.15.149 source: 196.44.191.3
Mon Jun 24 21:49:16 2019: user: misiek service: ssh target: 37.228.155.73 source: 196.44.191.3
Mon Jun 24 21:48:35 2019: user: misiek service: ssh target: 37.228.154.134 source: 196.44.191.3

Regards,
   Profihost AG Team