from mushawe.yoafrica.com ([196.44.176.11])
	by gwayi.yoafrica.com with esmtp (Exim 4.90_1 (FreeBSD))
	(envelope-from <noc@profihost.ag>)
	id 1iaHhH-0001C4-AO
	for abuse@yoafrica.com; Thu, 28 Nov 2019 13:10:55 +0200

from [41.190.32.2] (port=23096 helo=sengwe.utande.co.zw)
	by mushawe.yoafrica.com with esmtp (Exim 4.90_1)
	id 1iaHjY-00006w-Nq
	for abuse@yoafrica.com; Thu, 28 Nov 2019 13:13:16 +0200

from localhost (localhost [127.0.0.1])
	by sengwe.utande.co.zw (Postfix) with ESMTP id 77FA67A6624
	for <abuse@yoafrica.com>; Thu, 28 Nov 2019 13:10:00 +0200 (CAT)

No, score=3.333 tagged_above=-999 required=5
	tests=[BAYES_20=-0.001, DATE_IN_PAST_96_XX=3.405,
	RCVD_IN_DNSWL_LOW=0.001, SPF_HELO_NONE=0.001, ST_P0F_Linux=-0.1,
	TW_KM=0.027] autolearn=no autolearn_force=no

from sengwe.utande.co.zw (localhost [127.0.0.1])
	by sengwe.utande.co.zw (Postfix) with ESMTP id 811367A6627
	for <abuse@yoafrica.com>; Thu, 28 Nov 2019 13:09:55 +0200 (CAT)

from syslog.vms.phoffice.de-nserver.de (syslog.vms.phoffice.de-nserver.de [185.39.223.37])
	by sengwe.utande.co.zw (Postfix) with ESMTPS id 5DD087A6633
	for <abuse@yoafrica.com>; Thu, 28 Nov 2019 13:09:52 +0200 (CAT)

An attempt to brute-force account passwords over SSH/FTP by a machine in your domain or in your network has been detected. Attached are the host who attacks and time / date of activity. Please take the necessary action(s) to stop this activity immediately. If you have any questions please reply to this email.

Host of attacker: 41.190.36.210 => 210-36sxx.broadband.yoafrica.com => yoafrica.com
Responsible email contacts: abuse@yoafrica.com
Attacked hosts in our Network: 77.75.255.72, 37.228.154.222, 178.250.15.138, 77.75.253.87, 85.158.183.141, 37.228.153.14, 85.158.183.214, 185.39.220.97, 185.39.221.141, 178.250.10.67, 185.39.221.41, 178.250.10.74, 178.250.15.26, 77.75.255.78, 178.250.12.188, 77.75.251.211, 85.158.181.56, 178.250.12.117

Logfile entries (time is MET / GMT+1):
Tue Aug 20 07:56:52 2019: user: student service: ssh target: 37.228.154.222 source: 41.190.36.210
Tue Aug 20 07:55:35 2019: user: student service: ssh target: 178.250.15.26 source: 41.190.36.210
Tue Aug 20 07:54:25 2019: user: student service: ssh target: 178.250.12.117 source: 41.190.36.210
Tue Aug 20 07:51:27 2019: user: testuser service: ssh target: 37.228.153.14 source: 41.190.36.210
Tue Aug 20 07:51:22 2019: user: testuser service: ssh target: 37.228.154.222 source: 41.190.36.210
Tue Aug 20 07:51:15 2019: user: testuser service: ssh target: 178.250.12.188 source: 41.190.36.210
Tue Aug 20 07:50:14 2019: user: testuser service: ssh target: 77.75.255.72 source: 41.190.36.210
Tue Aug 20 07:50:05 2019: user: testuser service: ssh target: 178.250.15.26 source: 41.190.36.210
Tue Aug 20 07:50:02 2019: user: testuser service: ssh target: 185.39.221.41 source: 41.190.36.210
Tue Aug 20 07:48:55 2019: user: testuser service: ssh target: 178.250.12.117 source: 41.190.36.210
Tue Aug 20 07:46:15 2019: user: matt service: ssh target: 178.250.15.138 source: 41.190.36.210
Tue Aug 20 07:45:57 2019: user: matt service: ssh target: 37.228.153.14 source: 41.190.36.210
Tue Aug 20 07:45:15 2019: user: matt service: ssh target: 178.250.12.188 source: 41.190.36.210
Tue Aug 20 07:44:44 2019: user: matt service: ssh target: 77.75.255.72 source: 41.190.36.210
Tue Aug 20 07:44:32 2019: user: matt service: ssh target: 185.39.221.41 source: 41.190.36.210
Tue Aug 20 07:40:15 2019: user: aime service: ssh target: 178.250.15.138 source: 41.190.36.210
Tue Aug 20 07:39:55 2019: user: aime service: ssh target: 185.39.221.141 source: 41.190.36.210
Tue Aug 20 07:39:47 2019: user: aime service: ssh target: 77.75.255.78 source: 41.190.36.210
Tue Aug 20 07:39:45 2019: user: aime service: ssh target: 178.250.12.188 source: 41.190.36.210
Tue Aug 20 07:39:14 2019: user: aime service: ssh target: 77.75.255.72 source: 41.190.36.210
Tue Aug 20 07:39:02 2019: user: aime service: ssh target: 185.39.221.41 source: 41.190.36.210
Tue Aug 20 07:37:55 2019: user: aime service: ssh target: 178.250.12.117 source: 41.190.36.210
Tue Aug 20 07:35:15 2019: user: postgres service: ssh target: 178.250.15.138 source: 41.190.36.210
Tue Aug 20 07:34:59 2019: user: postgres service: ssh target: 85.158.183.214 source: 41.190.36.210
Tue Aug 20 07:34:25 2019: user: postgres service: ssh target: 185.39.221.141 source: 41.190.36.210
Tue Aug 20 07:34:17 2019: user: postgres service: ssh target: 77.75.255.78 source: 41.190.36.210
Tue Aug 20 07:34:15 2019: user: postgres service: ssh target: 178.250.12.188 source: 41.190.36.210
Tue Aug 20 07:33:44 2019: user: postgres service: ssh target: 77.75.255.72 source: 41.190.36.210
Tue Aug 20 07:33:32 2019: user: postgres service: ssh target: 185.39.221.41 source: 41.190.36.210
Tue Aug 20 07:29:15 2019: user: sylvester service: ssh target: 178.250.15.138 source: 41.190.36.210
Tue Aug 20 07:28:57 2019: user: sylvester service: ssh target: 37.228.153.14 source: 41.190.36.210
Tue Aug 20 07:28:55 2019: user: sylvester service: ssh target: 185.39.221.141 source: 41.190.36.210
Tue Aug 20 07:28:52 2019: user: sylvester service: ssh target: 37.228.154.222 source: 41.190.36.210
Tue Aug 20 07:28:47 2019: user: sylvester service: ssh target: 77.75.255.78 source: 41.190.36.210
Tue Aug 20 07:28:05 2019: user: sylvester service: ssh target: 178.250.15.26 source: 41.190.36.210
Tue Aug 20 07:28:02 2019: user: sylvester service: ssh target: 185.39.221.41 source: 41.190.36.210
Tue Aug 20 07:26:55 2019: user: sylvester service: ssh target: 178.250.12.117 source: 41.190.36.210
Tue Aug 20 07:24:25 2019: user: fake service: ssh target: 178.250.10.74 source: 41.190.36.210
Tue Aug 20 07:23:57 2019: user: fake service: ssh target: 37.228.153.14 source: 41.190.36.210
Tue Aug 20 07:22:35 2019: user: fake service: ssh target: 178.250.15.26 source: 41.190.36.210
Tue Aug 20 07:22:32 2019: user: fake service: ssh target: 185.39.221.41 source: 41.190.36.210
Tue Aug 20 07:18:45 2019: user: kafka service: ssh target: 178.250.15.138 source: 41.190.36.210
Tue Aug 20 07:18:29 2019: user: kafka service: ssh target: 85.158.183.214 source: 41.190.36.210
Tue Aug 20 07:18:27 2019: user: kafka service: ssh target: 37.228.153.14 source: 41.190.36.210
Tue Aug 20 07:18:25 2019: user: kafka service: ssh target: 185.39.221.141 source: 41.190.36.210
Tue Aug 20 07:18:15 2019: user: kafka service: ssh target: 178.250.12.188 source: 41.190.36.210
Tue Aug 20 07:17:47 2019: user: kafka service: ssh target: 77.75.255.78 source: 41.190.36.210
Tue Aug 20 07:17:14 2019: user: kafka service: ssh target: 77.75.255.72 source: 41.190.36.210
Tue Aug 20 07:00:57 2019: user: toto service: ssh target: 37.228.153.14 source: 41.190.36.210
Tue Aug 20 07:00:55 2019: user: toto service: ssh target: 185.39.221.141 source: 41.190.36.210
Sat Aug 17 00:44:02 2019: user: root service: ssh target: 178.250.10.67 source: 41.190.36.210
Sat Aug 17 00:42:55 2019: user: root service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 17 00:39:27 2019: user: root service: ssh target: 77.75.251.211 source: 41.190.36.210
Sat Aug 17 00:34:41 2019: user: vhost service: ssh target: 85.158.183.141 source: 41.190.36.210
Sat Aug 17 00:32:32 2019: user: daniel service: ssh target: 178.250.10.67 source: 41.190.36.210
Sat Aug 17 00:31:55 2019: user: daniel service: ssh target: 77.75.253.87 source: 41.190.36.210
Sat Aug 17 00:28:27 2019: user: daniel service: ssh target: 77.75.251.211 source: 41.190.36.210
Sat Aug 17 00:27:57 2019: user: daniel service: ssh target: 185.39.220.97 source: 41.190.36.210
Sat Aug 17 00:21:32 2019: user: kms service: ssh target: 178.250.10.67 source: 41.190.36.210
Sat Aug 17 00:19:28 2019: user: kms service: ssh target: 85.158.181.56 source: 41.190.36.210
Sat Aug 17 00:18:25 2019: user: kms service: ssh target: 77.75.253.87 source: 41.190.36.210

Regards,
   Profihost AG Team