from mushawe.yoafrica.com ([196.44.176.11])
	by gwayi.yoafrica.com with esmtp (Exim 4.90_1 (FreeBSD))
	(envelope-from <noc@profihost.ag>)
	id 1hwR3b-0004pk-8d
	for abuse@yoafrica.com; Sat, 10 Aug 2019 15:05:15 +0200

from [41.190.32.2] (port=53864 helo=sengwe.yoafrica.com)
	by mushawe.yoafrica.com with esmtp (Exim 4.90_1)
	id 1hwR5s-0000Ls-UH
	for abuse@yoafrica.com; Sat, 10 Aug 2019 15:07:37 +0200

from localhost (localhost [127.0.0.1])
	by sengwe.yoafrica.com (Postfix) with ESMTP id 1E45B77D2D4
	for <abuse@yoafrica.com>; Sat, 10 Aug 2019 15:07:33 +0200 (CAT)

No, score=4.928 tagged_above=-999 required=5
	tests=[ANTISPOOF_NAME=5, BAYES_40=-0.001, RCVD_IN_DNSWL_LOW=0.001,
	SPF_HELO_NONE=0.001, ST_P0F_Linux=-0.1, TW_JR=0.027]
	autolearn=no autolearn_force=no

from sengwe.yoafrica.com (localhost [127.0.0.1])
	by sengwe.yoafrica.com (Postfix) with ESMTP id F2FF677D2B9
	for <abuse@yoafrica.com>; Sat, 10 Aug 2019 15:07:27 +0200 (CAT)

from syslog.vms.phoffice.de-nserver.de (syslog.vms.phoffice.de-nserver.de [185.39.223.37])
	by sengwe.yoafrica.com (Postfix) with ESMTPS id C7AA477D2D4
	for <abuse@yoafrica.com>; Sat, 10 Aug 2019 15:07:22 +0200 (CAT)

An attempt to brute-force account passwords over SSH/FTP by a machine in your domain or in your network has been detected. Attached are the host who attacks and time / date of activity. Please take the necessary action(s) to stop this activity immediately. If you have any questions please reply to this email.

Host of attacker: 41.190.36.210 => 210-36sxx.broadband.yoafrica.com => yoafrica.com
Responsible email contacts: abuse@yoafrica.com
Attacked hosts in our Network: 85.158.176.72, 185.39.220.189, 178.250.10.239, 178.250.12.184, 185.39.221.175, 178.250.15.218, 185.39.221.103, 185.39.221.40, 178.250.15.116, 77.75.253.87, 77.75.252.250, 185.39.221.167, 185.39.220.232, 37.228.154.225

Logfile entries (time is MET / GMT+1):
Sat Aug 10 13:12:57 2019: user: root service: ssh target: 178.250.15.218 source: 41.190.36.210
Sat Aug 10 13:12:05 2019: user: root service: ssh target: 185.39.221.103 source: 41.190.36.210
Sat Aug 10 13:09:11 2019: user: admin service: ssh target: 178.250.15.116 source: 41.190.36.210
Sat Aug 10 13:09:08 2019: user: admin service: ssh target: 178.250.12.184 source: 41.190.36.210
Sat Aug 10 13:07:42 2019: user: admin service: ssh target: 185.39.221.40 source: 41.190.36.210
Sat Aug 10 13:03:41 2019: user: mathilda service: ssh target: 178.250.15.116 source: 41.190.36.210
Sat Aug 10 13:02:12 2019: user: mathilda service: ssh target: 185.39.221.40 source: 41.190.36.210
Sat Aug 10 13:02:12 2019: user: mathilda service: ssh target: 178.250.10.239 source: 41.190.36.210
Sat Aug 10 13:01:57 2019: user: mathilda service: ssh target: 178.250.15.218 source: 41.190.36.210
Sat Aug 10 13:01:05 2019: user: mathilda service: ssh target: 185.39.221.103 source: 41.190.36.210
Sat Aug 10 12:58:08 2019: user: liidia service: ssh target: 178.250.12.184 source: 41.190.36.210
Sat Aug 10 12:57:50 2019: user: liidia service: ssh target: 85.158.176.72 source: 41.190.36.210
Sat Aug 10 12:57:12 2019: user: liidia service: ssh target: 178.250.10.239 source: 41.190.36.210
Sat Aug 10 12:56:42 2019: user: liidia service: ssh target: 185.39.221.40 source: 41.190.36.210
Sat Aug 10 12:56:27 2019: user: liidia service: ssh target: 178.250.15.218 source: 41.190.36.210
Sat Aug 10 12:55:35 2019: user: liidia service: ssh target: 185.39.221.103 source: 41.190.36.210
Sat Aug 10 12:52:38 2019: user: brook service: ssh target: 178.250.12.184 source: 41.190.36.210
Sat Aug 10 12:50:57 2019: user: brook service: ssh target: 178.250.15.218 source: 41.190.36.210
Sat Aug 10 12:50:27 2019: user: brook service: ssh target: 185.39.220.232 source: 41.190.36.210
Sat Aug 10 12:50:05 2019: user: brook service: ssh target: 185.39.221.103 source: 41.190.36.210
Sat Aug 10 12:38:12 2019: user: marilena service: ssh target: 185.39.221.40 source: 41.190.36.210
Sat Aug 10 12:37:57 2019: user: marilena service: ssh target: 178.250.15.218 source: 41.190.36.210
Sat Aug 10 12:36:27 2019: user: marilena service: ssh target: 185.39.220.232 source: 41.190.36.210
Sat Aug 10 12:34:37 2019: user: marilena service: ssh target: 185.39.221.175 source: 41.190.36.210
Sat Aug 10 10:23:00 2019: user: root service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 10:10:58 2019: user: backups service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 09:58:26 2019: user: kpalma service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 09:52:26 2019: user: root service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 09:46:25 2019: user: monika service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 09:28:22 2019: user: steam service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 09:22:51 2019: user: manolo service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 09:10:49 2019: user: admin service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 08:59:18 2019: user: jerome service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 08:47:46 2019: user: root service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 08:41:46 2019: user: tara service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 08:35:44 2019: user: factorio service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 08:29:43 2019: user: tyson service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 08:18:12 2019: user: ftpuser service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 08:06:41 2019: user: solms service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 07:55:08 2019: user: nobody service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 07:32:04 2019: user: doris service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 07:20:32 2019: user: zero service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 07:15:01 2019: user: dong service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 07:09:00 2019: user: sbin service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 07:03:29 2019: user: anish service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 06:34:24 2019: user: nut service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 06:17:21 2019: user: root service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 06:11:20 2019: user: cloud service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 06:05:49 2019: user: cvsuser service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 05:42:45 2019: user: pms service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 05:37:15 2019: user: nrpe service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 05:20:12 2019: user: wl service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 05:14:11 2019: user: scaner service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 05:08:39 2019: user: ts service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 04:51:36 2019: user: externe service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 04:40:05 2019: user: pierre service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 04:28:32 2019: user: mother service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 04:22:31 2019: user: empty service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 04:17:01 2019: user: bmike service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 04:05:29 2019: user: filippid_admin service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 03:54:26 2019: user: teamspeak service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 03:48:24 2019: user: admin service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 03:42:53 2019: user: ftpuser service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 03:14:19 2019: user: shu service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 03:03:17 2019: user: mcserver service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 02:45:45 2019: user: Robert service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 10 02:19:41 2019: user: hera service: ssh target: 77.75.253.87 source: 41.190.36.210
Wed Aug  7 11:05:16 2019: user: root service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 11:03:03 2019: user: root service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 11:00:55 2019: user: alphonse service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 10:58:46 2019: user: alphonse service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 10:50:33 2019: user: xz service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 10:46:16 2019: user: tipodirect service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 10:44:29 2019: user: tipodirect service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 10:41:25 2019: user: elias service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 10:39:46 2019: user: elias service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 10:37:33 2019: user: elias service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 10:35:25 2019: user: justin service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 10:33:16 2019: user: justin service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 10:31:29 2019: user: justin service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 10:31:03 2019: user: justin service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 10:24:03 2019: user: mm service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 10:21:55 2019: user: jrkotrla service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 10:17:33 2019: user: jrkotrla service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 10:14:55 2019: user: oracle service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 10:13:16 2019: user: oracle service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 10:04:29 2019: user: ey service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 10:01:25 2019: user: robby service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 09:57:03 2019: user: robby service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 09:49:59 2019: user: www-data service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 09:45:55 2019: user: nginx service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 09:42:29 2019: user: nginx service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 09:41:33 2019: user: nginx service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 09:36:16 2019: user: b2b service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 09:28:46 2019: user: tamara service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 09:26:33 2019: user: tamara service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 09:17:33 2019: user: bbrazunas service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 09:12:16 2019: user: patrick service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 09:02:33 2019: user: student service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 08:57:46 2019: user: brunhilde service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 08:56:29 2019: user: brunhilde service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 08:52:55 2019: user: camilo service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 08:50:46 2019: user: camilo service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 08:37:25 2019: user: den service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 08:29:55 2019: user: syslog service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 08:22:55 2019: user: test1 service: ssh target: 185.39.221.167 source: 41.190.36.210
Wed Aug  7 08:20:46 2019: user: test1 service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 08:19:29 2019: user: test1 service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 08:19:03 2019: user: test1 service: ssh target: 77.75.252.250 source: 41.190.36.210
Wed Aug  7 08:14:16 2019: user: root service: ssh target: 185.39.220.189 source: 41.190.36.210
Wed Aug  7 07:35:29 2019: user: kadri service: ssh target: 37.228.154.225 source: 41.190.36.210
Wed Aug  7 07:34:02 2019: user: kadri service: ssh target: 77.75.252.250 source: 41.190.36.210

Regards,
   Profihost AG Team