An attempt to brute-force account passwords over SSH/FTP by a machine in your domain or in your network has been detected. Attached are the host who attacks and time / date of activity. Please take the necessary action(s) to stop this activity immediately. If you have any questions please reply to this email. Host of attacker: 80.76.43.187 => 80.76.43.187 => 80.76.43.187 Responsible email contacts: abuse@spacecore.pro Attacked hosts in our Network: 37.228.155.169, 37.228.155.160, 178.250.12.210, 37.228.156.251, 178.250.12.123, 77.75.253.202, 37.228.155.144, 37.228.154.175, 77.75.250.214, 91.151.20.10, 37.228.154.219, 185.39.220.39, 37.228.155.145, 185.39.220.75, 178.250.10.201, 91.151.20.23, 77.75.252.62, 85.158.176.68, 37.228.159.116, 178.250.12.75, 178.250.10.130, 77.75.250.253, 37.228.155.125, 185.39.221.154, 178.250.12.71, 81.88.33.98, 85.158.181.221, 178.250.14.176, 178.250.10.21, 178.250.14.12, 77.75.249.101, 81.88.33.137, 85.158.176.90, 178.250.10.13, 37.228.159.184, 77.75.254.189, 81.88.33.15, 178.250.14.47, 178.250.9.12, 85.158.181.58, 37.228.155.172, 77.75.250.211 Logfile entries (time is CE(S)T): Sun Nov 24 04:45:08 2024: user: git1 service: ssh target: 37.228.155.160 source: 80.76.43.187 Sun Nov 24 04:44:38 2024: user: test033 service: ssh target: 37.228.155.160 source: 80.76.43.187 Sun Nov 24 04:43:58 2024: user: gitosis service: ssh target: 37.228.155.160 source: 80.76.43.187 Sun Nov 24 04:43:18 2024: user: sftp service: ssh target: 37.228.155.160 source: 80.76.43.187 Sun Nov 24 04:42:38 2024: user: ubuntu service: ssh target: 37.228.155.160 source: 80.76.43.187 Sun Nov 24 04:40:18 2024: user: user1 service: ssh target: 37.228.155.160 source: 80.76.43.187 Sun Nov 24 04:39:16 2024: user: minecraftserver service: ssh target: 77.75.252.62 source: 80.76.43.187 Sun Nov 24 04:38:44 2024: user: minecraftserver service: ssh target: 81.88.33.137 source: 80.76.43.187 Sun Nov 24 04:38:39 2024: user: minecraftserver service: ssh target: 37.228.155.144 source: 80.76.43.187 Sun Nov 24 04:38:14 2024: user: minecraftserver service: ssh target: 178.250.9.12 source: 80.76.43.187 Sun Nov 24 04:37:56 2024: user: ubuntu service: ssh target: 77.75.252.62 source: 80.76.43.187 Sun Nov 24 04:37:34 2024: user: ubuntu service: ssh target: 81.88.33.137 source: 80.76.43.187 Sun Nov 24 04:37:29 2024: user: ubuntu service: ssh target: 37.228.155.144 source: 80.76.43.187 Sun Nov 24 04:37:04 2024: user: ubuntu service: ssh target: 178.250.9.12 source: 80.76.43.187 Sun Nov 24 04:36:36 2024: user: user service: ssh target: 77.75.252.62 source: 80.76.43.187 Sun Nov 24 04:36:04 2024: user: user service: ssh target: 81.88.33.137 source: 80.76.43.187 Sun Nov 24 04:35:59 2024: user: user service: ssh target: 37.228.155.144 source: 80.76.43.187 Sun Nov 24 04:35:34 2024: user: user service: ssh target: 178.250.9.12 source: 80.76.43.187 Sun Nov 24 04:35:16 2024: user: admin service: ssh target: 77.75.252.62 source: 80.76.43.187 Sun Nov 24 04:34:44 2024: user: admin service: ssh target: 81.88.33.137 source: 80.76.43.187 Sun Nov 24 04:34:39 2024: user: admin service: ssh target: 37.228.155.144 source: 80.76.43.187 Sun Nov 24 04:34:14 2024: user: admin service: ssh target: 178.250.9.12 source: 80.76.43.187 Sun Nov 24 04:33:56 2024: user: oracle service: ssh target: 77.75.252.62 source: 80.76.43.187 Sun Nov 24 04:33:29 2024: user: oracle service: ssh target: 37.228.155.144 source: 80.76.43.187 Sun Nov 24 04:33:24 2024: user: oracle service: ssh target: 81.88.33.137 source: 80.76.43.187 Sun Nov 24 04:33:04 2024: user: oracle service: ssh target: 178.250.9.12 source: 80.76.43.187 Sun Nov 24 04:32:46 2024: user: mysql service: ssh target: 77.75.252.62 source: 80.76.43.187 Sun Nov 24 04:32:14 2024: user: mysql service: ssh target: 81.88.33.137 source: 80.76.43.187 Sun Nov 24 04:32:09 2024: user: mysql service: ssh target: 37.228.155.144 source: 80.76.43.187 Sun Nov 24 04:31:54 2024: user: mysql service: ssh target: 178.250.9.12 source: 80.76.43.187 Sun Nov 24 04:31:26 2024: user: github service: ssh target: 77.75.252.62 source: 80.76.43.187 Sun Nov 24 04:31:04 2024: user: github service: ssh target: 81.88.33.137 source: 80.76.43.187 Sun Nov 24 04:30:59 2024: user: github service: ssh target: 37.228.155.144 source: 80.76.43.187 Sun Nov 24 04:30:34 2024: user: github service: ssh target: 178.250.9.12 source: 80.76.43.187 Sun Nov 24 04:30:06 2024: user: admin service: ssh target: 77.75.252.62 source: 80.76.43.187 Sun Nov 24 04:29:44 2024: user: admin service: ssh target: 81.88.33.137 source: 80.76.43.187 Sun Nov 24 04:29:39 2024: user: admin service: ssh target: 37.228.155.144 source: 80.76.43.187 Sun Nov 24 04:29:14 2024: user: admin service: ssh target: 178.250.9.12 source: 80.76.43.187 Sun Nov 24 04:28:56 2024: user: mysql service: ssh target: 77.75.252.62 source: 80.76.43.187 Sun Nov 24 04:28:24 2024: user: mysql service: ssh target: 81.88.33.137 source: 80.76.43.187 Sun Nov 24 04:28:19 2024: user: mysql service: ssh target: 37.228.155.144 source: 80.76.43.187 Sun Nov 24 04:27:54 2024: user: mysql service: ssh target: 178.250.9.12 source: 80.76.43.187 Sun Nov 24 04:27:36 2024: user: ubuntu service: ssh target: 77.75.252.62 source: 80.76.43.187 Sun Nov 24 04:27:14 2024: user: ubuntu service: ssh target: 81.88.33.137 source: 80.76.43.187 Sun Nov 24 04:27:09 2024: user: ubuntu service: ssh target: 37.228.155.144 source: 80.76.43.187 Sun Nov 24 04:26:44 2024: user: ubuntu service: ssh target: 178.250.9.12 source: 80.76.43.187 Sun Nov 24 04:26:26 2024: user: gitlab service: ssh target: 77.75.252.62 source: 80.76.43.187 Sun Nov 24 04:25:54 2024: user: gitlab service: ssh target: 81.88.33.137 source: 80.76.43.187 Sun Nov 24 04:25:49 2024: user: gitlab service: ssh target: 37.228.155.144 source: 80.76.43.187 ... Regards, Profihost AG Team The recipient address of this report was provided by the Abuse Contact DB by abusix.com. Abusix provides a free proxy DB service which provides the abuse@ address for all global RIRs. Abusix does not maintain the core DB content but provides a service built on top of the RIR databases. If you wish to change or report a non-working abuse contact address. please contact the appropriate RIR responsible for managing the underlying data. If you have any further questions about using the Abusix Abuse Contact DB, please either contact abusix.com directly via email (info@abusix.com) or visit the URL here: https://abusix.com/contactdb Abusix is neither responsible nor liable for the content or accuracy of this message.
