We have received information regarding spam and/or abuse from firstname.lastname@example.org.
Please take all necessary measures to avoid this in the future.
We have detected abuse from the IP address ( 126.96.36.199 ), which according to a whois lookup is on your network. We would appreciate if you would investigate and take action as appropriate.
Log lines are given below, but please ask if you require any further information.
IP of the attacker: 188.8.131.52
==================== Excerpt from log for 184.108.40.206 ====================
Note: Local timezone is +0100 (CET)
Mar 3 04:13:43 shared05 sshd: Invalid user sunqiu from 220.127.116.11 port 55044
Mar 3 04:13:43 shared05 sshd: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=18.104.22.168
Mar 3 04:13:46 shared05 sshd: Failed password for invalid user sunqiu from 22.214.171.124 port 55044 ssh2
Mar 3 04:13:46 shared05 sshd: Received disconnect from 126.96.36.199 port 55044:11: Bye Bye [preauth]
Mar 3 04:13:46 shared05 sshd: Disconnected from invalid user sunqiu 188.8.131.52 port 55044 [preauth]