from mushawe.yoafrica.com ([196.44.176.11])
	by gwayi.yoafrica.com with esmtp (Exim 4.90_1 (FreeBSD))
	(envelope-from <noc@profihost.ag>)
	id 1hvJYD-000PZx-Cy
	for abuse@yoafrica.com; Wed, 07 Aug 2019 12:52:13 +0200

from [41.190.32.2] (port=23664 helo=sengwe.yoafrica.com)
	by mushawe.yoafrica.com with esmtp (Exim 4.90_1)
	id 1hvJaU-0003tN-TF
	for abuse@yoafrica.com; Wed, 07 Aug 2019 12:54:35 +0200

from localhost (localhost [127.0.0.1])
	by sengwe.yoafrica.com (Postfix) with ESMTP id 9041277D2C1
	for <abuse@yoafrica.com>; Wed,  7 Aug 2019 12:54:36 +0200 (CAT)

No, score=4.928 tagged_above=-999 required=5
	tests=[ANTISPOOF_NAME=5, BAYES_20=-0.001, RCVD_IN_DNSWL_LOW=0.001,
	SPF_HELO_NONE=0.001, ST_P0F_Linux=-0.1, TW_JR=0.027]
	autolearn=no autolearn_force=no

from sengwe.yoafrica.com (localhost [127.0.0.1])
	by sengwe.yoafrica.com (Postfix) with ESMTP id 3316777D2E3
	for <abuse@yoafrica.com>; Wed,  7 Aug 2019 12:54:31 +0200 (CAT)

from syslog.vms.phoffice.de-nserver.de (syslog.vms.phoffice.de-nserver.de [185.39.223.37])
	by sengwe.yoafrica.com (Postfix) with ESMTPS id 0AAD677D2AE
	for <abuse@yoafrica.com>; Wed,  7 Aug 2019 12:54:23 +0200 (CAT)

An attempt to brute-force account passwords over SSH/FTP by a machine in your domain or in your network has been detected. Attached are the host who attacks and time / date of activity. Please take the necessary action(s) to stop this activity immediately. If you have any questions please reply to this email.

Host of attacker: 41.190.36.210 => 210-36sxx.broadband.yoafrica.com => yoafrica.com
Responsible email contacts: abuse@yoafrica.com
Attacked hosts in our Network: 185.39.220.168, 185.39.220.189, 37.228.154.225, 85.158.183.159, 77.75.252.250, 185.39.220.152, 185.39.221.168, 37.228.154.150, 178.250.15.161, 185.39.221.167

Logfile entries (time is MET / GMT+1):
Wed Aug  7 11:05:16 2019: user: root service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 11:03:03 2019: user: root service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 11:00:55 2019: user: alphonse service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 10:58:46 2019: user: alphonse service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 10:50:33 2019: user: xz service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 10:46:16 2019: user: tipodirect service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 10:44:29 2019: user: tipodirect service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 10:41:25 2019: user: elias service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 10:39:46 2019: user: elias service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 10:37:33 2019: user: elias service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 10:35:25 2019: user: justin service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 10:33:16 2019: user: justin service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 10:31:29 2019: user: justin service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 10:31:03 2019: user: justin service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 10:24:03 2019: user: mm service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 10:21:55 2019: user: jrkotrla service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 10:17:33 2019: user: jrkotrla service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 10:14:55 2019: user: oracle service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 10:13:16 2019: user: oracle service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 10:04:29 2019: user: ey service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 10:01:25 2019: user: robby service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 09:57:03 2019: user: robby service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 09:49:59 2019: user: www-data service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 09:45:55 2019: user: nginx service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 09:42:29 2019: user: nginx service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 09:41:33 2019: user: nginx service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 09:36:16 2019: user: b2b service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 09:28:46 2019: user: tamara service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 09:26:33 2019: user: tamara service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 09:17:33 2019: user: bbrazunas service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 09:12:16 2019: user: patrick service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 09:02:33 2019: user: student service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 08:57:46 2019: user: brunhilde service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 08:56:29 2019: user: brunhilde service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 08:52:55 2019: user: camilo service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 08:50:46 2019: user: camilo service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 08:37:25 2019: user: den service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 08:29:55 2019: user: syslog service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 08:22:55 2019: user: test1 service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 08:20:46 2019: user: test1 service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 08:19:29 2019: user: test1 service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 08:19:03 2019: user: test1 service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 08:14:16 2019: user: root service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 07:35:29 2019: user: kadri service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 07:34:02 2019: user: kadri service: ssh target: 77.75.252.250 source: 41.190.36.210
Sun Aug  4 03:47:44 2019: user: root service: ssh target: 178.250.15.161 source: 41.190.36.210
Sun Aug  4 03:46:54 2019: user: root service: ssh target: 37.228.154.150 source: 41.190.36.210
Sun Aug  4 03:46:41 2019: user: root service: ssh target: 185.39.220.168 source: 41.190.36.210
Sun Aug  4 03:39:18 2019: user: comut service: ssh target: 185.39.221.168 source: 41.190.36.210
Sun Aug  4 03:35:24 2019: user: bill service: ssh target: 37.228.154.150 source: 41.190.36.210
Sun Aug  4 03:34:24 2019: user: bill service: ssh target: 185.39.220.152 source: 41.190.36.210
Sun Aug  4 03:30:14 2019: user: kumari service: ssh target: 178.250.15.161 source: 41.190.36.210
Sun Aug  4 03:27:18 2019: user: kumari service: ssh target: 185.39.221.168 source: 41.190.36.210
Sun Aug  4 03:22:54 2019: user: oprofile service: ssh target: 185.39.220.152 source: 41.190.36.210
Sun Aug  4 03:21:57 2019: user: oprofile service: ssh target: 85.158.183.159 source: 41.190.36.210
Sun Aug  4 03:15:57 2019: user: newuser service: ssh target: 85.158.183.159 source: 41.190.36.210
Sun Aug  4 03:15:48 2019: user: newuser service: ssh target: 185.39.221.168 source: 41.190.36.210
Sun Aug  4 03:10:54 2019: user: hiroshi service: ssh target: 185.39.220.152 source: 41.190.36.210
Sun Aug  4 03:09:57 2019: user: hiroshi service: ssh target: 85.158.183.159 source: 41.190.36.210
Sun Aug  4 02:58:24 2019: user: tanaka service: ssh target: 185.39.220.152 source: 41.190.36.210
Sun Aug  4 02:56:27 2019: user: tanaka service: ssh target: 85.158.183.159 source: 41.190.36.210

Regards,
   Profihost AG Team