from mushawe.yoafrica.com ([196.44.176.11])
	by gwayi.yoafrica.com with esmtp (Exim 4.90_1 (FreeBSD))
	(envelope-from <noc@profihost.ag>)
	id 1hpJmp-000Jyy-Jq
	for abuse@yoafrica.com; Sun, 21 Jul 2019 23:54:31 +0200

from [41.190.32.2] (port=56948 helo=sengwe.yoafrica.com)
	by mushawe.yoafrica.com with esmtp (Exim 4.90_1)
	id 1hpJp6-0005qq-Qa
	for abuse@yoafrica.com; Sun, 21 Jul 2019 23:56:52 +0200

from localhost (localhost [127.0.0.1])
	by sengwe.yoafrica.com (Postfix) with ESMTP id C066977D29C
	for <abuse@yoafrica.com>; Sun, 21 Jul 2019 23:57:23 +0200 (CAT)

No, score=4.901 tagged_above=-999 required=5
	tests=[ANTISPOOF_NAME=5, BAYES_20=-0.001, RCVD_IN_DNSWL_LOW=0.001,
	SPF_HELO_NONE=0.001, ST_P0F_Linux=-0.1]
	autolearn=no autolearn_force=no

from sengwe.yoafrica.com (localhost [127.0.0.1])
	by sengwe.yoafrica.com (Postfix) with ESMTP id ED02377D2AA
	for <abuse@yoafrica.com>; Sun, 21 Jul 2019 23:57:18 +0200 (CAT)

from syslog.vms.phoffice.de-nserver.de (syslog.vms.phoffice.de-nserver.de [185.39.223.37])
	by sengwe.yoafrica.com (Postfix) with ESMTPS id BE7D277D2A2
	for <abuse@yoafrica.com>; Sun, 21 Jul 2019 23:57:13 +0200 (CAT)

An attempt to brute-force account passwords over SSH/FTP by a machine in your domain or in your network has been detected. Attached are the host who attacks and time / date of activity. Please take the necessary action(s) to stop this activity immediately. If you have any questions please reply to this email.

Host of attacker: 41.190.36.210 => 210-36sxx.broadband.yoafrica.com => yoafrica.com
Responsible email contacts: abuse@yoafrica.com
Attacked hosts in our Network: 85.158.176.175, 185.39.221.151, 185.39.221.8, 85.158.176.135, 178.250.15.139, 178.250.10.54, 37.228.159.148, 77.75.249.87, 77.75.251.49, 37.228.155.85, 85.158.182.158, 85.158.183.191

Logfile entries (time is MET / GMT+1):
Sun Jul 21 19:19:57 2019: user: root service: ssh target: 85.158.176.135 source: 41.190.36.210
Sun Jul 21 19:19:11 2019: user: bill service: ssh target: 85.158.176.175 source: 41.190.36.210
Sun Jul 21 19:18:33 2019: user: bill service: ssh target: 85.158.183.191 source: 41.190.36.210
Sun Jul 21 19:18:33 2019: user: bill service: ssh target: 37.228.159.148 source: 41.190.36.210
Sun Jul 21 19:18:07 2019: user: bill service: ssh target: 85.158.182.158 source: 41.190.36.210
Sun Jul 21 19:17:35 2019: user: bill service: ssh target: 178.250.10.54 source: 41.190.36.210
Sun Jul 21 19:17:33 2019: user: bill service: ssh target: 77.75.249.87 source: 41.190.36.210
Sun Jul 21 19:17:12 2019: user: bill service: ssh target: 37.228.155.85 source: 41.190.36.210
Sun Jul 21 19:13:55 2019: user: bill service: ssh target: 77.75.251.49 source: 41.190.36.210
Sun Jul 21 19:12:41 2019: user: matrix service: ssh target: 85.158.176.175 source: 41.190.36.210
Sun Jul 21 19:12:33 2019: user: matrix service: ssh target: 85.158.183.191 source: 41.190.36.210
Sun Jul 21 19:12:33 2019: user: matrix service: ssh target: 37.228.159.148 source: 41.190.36.210
Sun Jul 21 19:07:27 2019: user: matrix service: ssh target: 85.158.176.135 source: 41.190.36.210
Sun Jul 21 19:06:41 2019: user: ubuntu service: ssh target: 85.158.176.175 source: 41.190.36.210
Sun Jul 21 19:06:33 2019: user: ubuntu service: ssh target: 37.228.159.148 source: 41.190.36.210
Sun Jul 21 19:05:37 2019: user: ubuntu service: ssh target: 85.158.182.158 source: 41.190.36.210
Sun Jul 21 19:04:42 2019: user: ubuntu service: ssh target: 37.228.155.85 source: 41.190.36.210
Sun Jul 21 19:04:40 2019: user: ubuntu service: ssh target: 185.39.221.151 source: 41.190.36.210
Sun Jul 21 19:04:26 2019: user: ubuntu service: ssh target: 178.250.15.139 source: 41.190.36.210
Sun Jul 21 19:00:41 2019: user: production service: ssh target: 85.158.176.175 source: 41.190.36.210
Sun Jul 21 19:00:33 2019: user: production service: ssh target: 85.158.183.191 source: 41.190.36.210
Sun Jul 21 18:59:37 2019: user: production service: ssh target: 85.158.182.158 source: 41.190.36.210
Sun Jul 21 18:59:03 2019: user: production service: ssh target: 77.75.249.87 source: 41.190.36.210
Sun Jul 21 18:58:42 2019: user: production service: ssh target: 37.228.155.85 source: 41.190.36.210
Sun Jul 21 18:58:10 2019: user: production service: ssh target: 185.39.221.151 source: 41.190.36.210
Sun Jul 21 18:57:56 2019: user: production service: ssh target: 178.250.15.139 source: 41.190.36.210
Sun Jul 21 18:55:27 2019: user: production service: ssh target: 85.158.176.135 source: 41.190.36.210
Sun Jul 21 18:54:11 2019: user: odoo service: ssh target: 85.158.176.175 source: 41.190.36.210
Sun Jul 21 18:54:03 2019: user: odoo service: ssh target: 85.158.183.191 source: 41.190.36.210
Sun Jul 21 18:54:03 2019: user: odoo service: ssh target: 37.228.159.148 source: 41.190.36.210
Sun Jul 21 18:53:03 2019: user: odoo service: ssh target: 77.75.249.87 source: 41.190.36.210
Sun Jul 21 18:52:42 2019: user: odoo service: ssh target: 37.228.155.85 source: 41.190.36.210
Sun Jul 21 18:52:27 2019: user: odoo service: ssh target: 185.39.221.8 source: 41.190.36.210
Sun Jul 21 18:52:10 2019: user: odoo service: ssh target: 185.39.221.151 source: 41.190.36.210
Sun Jul 21 18:49:24 2019: user: odoo service: ssh target: 77.75.251.49 source: 41.190.36.210
Sun Jul 21 18:48:57 2019: user: odoo service: ssh target: 85.158.176.135 source: 41.190.36.210
Sun Jul 21 18:48:11 2019: user: steam service: ssh target: 85.158.176.175 source: 41.190.36.210
Sun Jul 21 18:48:03 2019: user: steam service: ssh target: 37.228.159.148 source: 41.190.36.210
Sun Jul 21 18:46:35 2019: user: steam service: ssh target: 178.250.10.54 source: 41.190.36.210
Sun Jul 21 18:46:12 2019: user: steam service: ssh target: 37.228.155.85 source: 41.190.36.210
Sun Jul 21 18:41:33 2019: user: gw service: ssh target: 85.158.183.191 source: 41.190.36.210
Sun Jul 21 18:41:33 2019: user: gw service: ssh target: 37.228.159.148 source: 41.190.36.210
Sun Jul 21 18:39:27 2019: user: gw service: ssh target: 185.39.221.8 source: 41.190.36.210
Sun Jul 21 18:39:10 2019: user: gw service: ssh target: 185.39.221.151 source: 41.190.36.210
Sun Jul 21 18:38:56 2019: user: gw service: ssh target: 178.250.15.139 source: 41.190.36.210
Sun Jul 21 18:36:24 2019: user: gw service: ssh target: 77.75.251.49 source: 41.190.36.210
Sun Jul 21 18:31:41 2019: user: angelo service: ssh target: 85.158.176.175 source: 41.190.36.210
Sun Jul 21 18:31:03 2019: user: angelo service: ssh target: 37.228.159.148 source: 41.190.36.210
Sun Jul 21 18:27:33 2019: user: angelo service: ssh target: 77.75.249.87 source: 41.190.36.210
Sun Jul 21 18:27:12 2019: user: angelo service: ssh target: 37.228.155.85 source: 41.190.36.210
Sun Jul 21 18:25:40 2019: user: angelo service: ssh target: 185.39.221.151 source: 41.190.36.210

Regards,
   Profihost AG Team