from mushawe.yoafrica.com ([196.44.176.11])
	by gwayi.yoafrica.com with esmtp (Exim 4.90_1 (FreeBSD))
	(envelope-from <noc@profihost.ag>)
	id 1hsx3l-0007Kv-LK
	for abuse@yoafrica.com; Thu, 01 Aug 2019 00:27:01 +0200

from [41.190.32.2] (port=51884 helo=sengwe.yoafrica.com)
	by mushawe.yoafrica.com with esmtp (Exim 4.90_1)
	id 1hsx63-0004Vf-60
	for abuse@yoafrica.com; Thu, 01 Aug 2019 00:29:23 +0200

from localhost (localhost [127.0.0.1])
	by sengwe.yoafrica.com (Postfix) with ESMTP id 6810577D2A2
	for <abuse@yoafrica.com>; Thu,  1 Aug 2019 00:29:36 +0200 (CAT)

Yes, score=5.729 tagged_above=-999 required=5
	tests=[ANTISPOOF_NAME=5, BAYES_50=0.8, RCVD_IN_DNSWL_LOW=0.001,
	SPF_HELO_NONE=0.001, ST_P0F_Linux=-0.1, TW_LX=0.027]
	autolearn=no autolearn_force=no

from sengwe.yoafrica.com (localhost [127.0.0.1])
	by sengwe.yoafrica.com (Postfix) with ESMTP id 4A7F977D2AA
	for <abuse@yoafrica.com>; Thu,  1 Aug 2019 00:29:31 +0200 (CAT)

from syslog.vms.phoffice.de-nserver.de (syslog.vms.phoffice.de-nserver.de [185.39.223.37])
	by sengwe.yoafrica.com (Postfix) with ESMTPS id 215A877D2A2
	for <abuse@yoafrica.com>; Thu,  1 Aug 2019 00:29:27 +0200 (CAT)

An attempt to brute-force account passwords over SSH/FTP by a machine in your domain or in your network has been detected. Attached are the host who attacks and time / date of activity. Please take the necessary action(s) to stop this activity immediately. If you have any questions please reply to this email.

Host of attacker: 41.190.36.210 => 210-36sxx.broadband.yoafrica.com => yoafrica.com
Responsible email contacts: abuse@yoafrica.com
Attacked hosts in our Network: 77.75.249.164, 185.39.223.20, 185.39.220.155, 178.250.14.216, 77.75.249.57, 85.158.182.158, 178.250.15.187, 178.250.15.178, 178.250.12.41, 77.75.249.23, 77.75.252.250, 77.75.253.87, 85.158.181.96, 37.228.155.17, 178.250.10.159, 85.158.181.25, 77.75.252.21

Logfile entries (time is MET / GMT+1):
Wed Jul 31 23:50:28 2019: user: ts3server service: ssh target: 185.39.223.20 source: 41.190.36.210
Wed Jul 31 23:38:28 2019: user: sn service: ssh target: 185.39.223.20 source: 41.190.36.210
Wed Jul 31 23:26:28 2019: user: awsjava service: ssh target: 185.39.223.20 source: 41.190.36.210
Wed Jul 31 23:13:58 2019: user: iptv service: ssh target: 185.39.223.20 source: 41.190.36.210
Wed Jul 31 23:07:58 2019: user: root service: ssh target: 185.39.223.20 source: 41.190.36.210
Wed Jul 31 23:01:58 2019: user: cav service: ssh target: 185.39.223.20 source: 41.190.36.210
Wed Jul 31 22:49:58 2019: user: claudio service: ssh target: 185.39.223.20 source: 41.190.36.210
Wed Jul 31 22:37:28 2019: user: root service: ssh target: 185.39.223.20 source: 41.190.36.210
Wed Jul 31 22:36:29 2019: user: root service: ssh target: 77.75.252.21 source: 41.190.36.210
Wed Jul 31 22:34:42 2019: user: root service: ssh target: 77.75.249.23 source: 41.190.36.210
Wed Jul 31 22:34:39 2019: user: root service: ssh target: 185.39.220.155 source: 41.190.36.210
Wed Jul 31 22:33:35 2019: user: bot service: ssh target: 77.75.249.57 source: 41.190.36.210
Wed Jul 31 22:31:49 2019: user: bot service: ssh target: 178.250.15.187 source: 41.190.36.210
Wed Jul 31 22:31:12 2019: user: bot service: ssh target: 178.250.14.216 source: 41.190.36.210
Wed Jul 31 22:30:09 2019: user: bot service: ssh target: 85.158.181.96 source: 41.190.36.210
Wed Jul 31 22:29:03 2019: user: bot service: ssh target: 178.250.10.159 source: 41.190.36.210
Wed Jul 31 22:28:59 2019: user: bot service: ssh target: 77.75.249.164 source: 41.190.36.210
Wed Jul 31 22:26:04 2019: user: bot service: ssh target: 178.250.12.41 source: 41.190.36.210
Wed Jul 31 22:24:29 2019: user: bot service: ssh target: 77.75.252.21 source: 41.190.36.210
Wed Jul 31 22:20:09 2019: user: bot service: ssh target: 185.39.220.155 source: 41.190.36.210
Wed Jul 31 22:19:31 2019: user: bot service: ssh target: 77.75.252.250 source: 41.190.36.210
Tue Jul 30 22:00:32 2019: user: tester service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 21:42:59 2019: user: rain service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 21:31:27 2019: user: rechner service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 21:19:54 2019: user: pma service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 21:02:21 2019: user: linux service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 20:50:18 2019: user: rstudio service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 20:44:17 2019: user: sy service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 20:26:44 2019: user: chile service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 20:15:10 2019: user: greenhg service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 20:09:09 2019: user: ileen service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 19:57:37 2019: user: ftptest service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 19:45:04 2019: user: emp service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 19:38:32 2019: user: ftpadmin service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 19:31:31 2019: user: mrdrum service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 19:04:25 2019: user: asam service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 18:31:48 2019: user: rosario service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 18:25:17 2019: user: alarm service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 18:06:13 2019: user: root service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 17:54:10 2019: user: august service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 17:47:09 2019: user: lxpopuser service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 17:28:34 2019: user: langamin service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 17:22:03 2019: user: lin service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 17:09:01 2019: user: root service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 17:02:30 2019: user: gate service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 16:49:26 2019: user: lex service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 16:29:53 2019: user: user service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 15:55:15 2019: user: test service: ssh target: 77.75.253.87 source: 41.190.36.210
Tue Jul 30 15:34:41 2019: user: subrat service: ssh target: 77.75.253.87 source: 41.190.36.210
Sun Jul 28 01:09:39 2019: user: root service: ssh target: 85.158.181.25 source: 41.190.36.210
Sun Jul 28 01:09:34 2019: user: root service: ssh target: 178.250.15.178 source: 41.190.36.210
Sun Jul 28 01:06:18 2019: user: root service: ssh target: 85.158.182.158 source: 41.190.36.210
Sun Jul 28 00:51:46 2019: user: root service: ssh target: 37.228.155.17 source: 41.190.36.210
Sat Jul 27 04:27:29 2019: user: mobistar service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 04:21:27 2019: user: idcuser!@# service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 04:15:27 2019: user: Asd123! service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 04:03:55 2019: user: sangmaosen service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 03:57:54 2019: user: rootpassg service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 03:40:21 2019: user: nickie service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 03:34:20 2019: user: tneduts service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 03:28:19 2019: user: godflesh service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 03:22:48 2019: user: caihao service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 02:59:14 2019: user: z3268350 service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 02:53:13 2019: user: idc@123g service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 02:47:12 2019: user: epiphone service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 02:41:42 2019: user: hb666 service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 02:35:40 2019: user: kleenex service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 02:24:08 2019: user: bayern service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 02:18:07 2019: user: az78qs45 service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Jul 27 02:06:36 2019: user: Sp06092007 service: ssh target: 77.75.253.87 source: 41.190.36.210

Regards,
   Profihost AG Team