An attempt to brute-force account passwords over SSH/FTP by a machine in your domain or in your network has been detected. Attached are the host who attacks and time / date of activity. Please take the necessary action(s) to stop this activity immediately. If you have any questions please reply to this email.
Host of attacker: 80.76.43.150 => 80.76.43.150 => 80.76.43.150
Responsible email contacts: abuse@spacecore.pro
Attacked hosts in our Network: 178.250.10.233, 37.228.154.27, 178.250.14.195, 178.250.10.22, 178.250.9.128, 85.158.181.21, 37.228.156.56, 37.228.159.220
Logfile entries (time is CE(S)T):
Fri Jan 3 00:50:47 2025: user: root service: ssh target: 178.250.10.233 source: 80.76.43.150
Fri Jan 3 00:50:37 2025: user: root service: ssh target: 178.250.10.233 source: 80.76.43.150
Fri Jan 3 00:50:37 2025: user: root service: ssh target: 178.250.10.233 source: 80.76.43.150
Fri Jan 3 00:50:37 2025: user: root service: ssh target: 178.250.10.233 source: 80.76.43.150
Fri Jan 3 00:50:27 2025: user: root service: ssh target: 178.250.10.233 source: 80.76.43.150
Fri Jan 3 00:50:27 2025: user: root service: ssh target: 178.250.10.233 source: 80.76.43.150
Thu Jan 2 23:30:00 2025: user: root service: ssh target: 178.250.10.22 source: 80.76.43.150
Thu Jan 2 23:29:50 2025: user: root service: ssh target: 178.250.10.22 source: 80.76.43.150
Thu Jan 2 23:29:50 2025: user: root service: ssh target: 178.250.10.22 source: 80.76.43.150
Thu Jan 2 23:29:50 2025: user: root service: ssh target: 178.250.10.22 source: 80.76.43.150
Thu Jan 2 19:29:26 2025: user: root service: ssh target: 85.158.181.21 source: 80.76.43.150
Thu Jan 2 19:29:16 2025: user: root service: ssh target: 85.158.181.21 source: 80.76.43.150
Thu Jan 2 19:29:16 2025: user: root service: ssh target: 85.158.181.21 source: 80.76.43.150
Thu Jan 2 19:29:16 2025: user: root service: ssh target: 85.158.181.21 source: 80.76.43.150
Thu Jan 2 18:44:02 2025: user: root service: ssh target: 178.250.9.128 source: 80.76.43.150
Thu Jan 2 18:44:02 2025: user: root service: ssh target: 178.250.9.128 source: 80.76.43.150
Thu Jan 2 18:44:02 2025: user: root service: ssh target: 178.250.9.128 source: 80.76.43.150
Thu Jan 2 18:44:02 2025: user: root service: ssh target: 178.250.9.128 source: 80.76.43.150
Thu Jan 2 18:43:52 2025: user: root service: ssh target: 178.250.9.128 source: 80.76.43.150
Thu Jan 2 18:43:52 2025: user: root service: ssh target: 178.250.9.128 source: 80.76.43.150
Thu Jan 2 15:01:42 2025: user: root service: ssh target: 37.228.156.56 source: 80.76.43.150
Thu Jan 2 15:01:32 2025: user: root service: ssh target: 37.228.156.56 source: 80.76.43.150
Thu Jan 2 15:01:32 2025: user: root service: ssh target: 37.228.156.56 source: 80.76.43.150
Thu Jan 2 15:01:32 2025: user: root service: ssh target: 37.228.156.56 source: 80.76.43.150
Thu Jan 2 14:53:44 2025: user: root service: ssh target: 178.250.14.195 source: 80.76.43.150
Thu Jan 2 14:53:34 2025: user: root service: ssh target: 178.250.14.195 source: 80.76.43.150
Thu Jan 2 14:53:34 2025: user: root service: ssh target: 178.250.14.195 source: 80.76.43.150
Thu Jan 2 14:53:34 2025: user: root service: ssh target: 178.250.14.195 source: 80.76.43.150
Thu Jan 2 14:53:24 2025: user: root service: ssh target: 178.250.14.195 source: 80.76.43.150
Thu Jan 2 14:53:24 2025: user: root service: ssh target: 178.250.14.195 source: 80.76.43.150
Thu Jan 2 14:12:11 2025: user: root service: ssh target: 37.228.159.220 source: 80.76.43.150
Thu Jan 2 14:12:01 2025: user: root service: ssh target: 37.228.159.220 source: 80.76.43.150
Thu Jan 2 14:12:01 2025: user: root service: ssh target: 37.228.159.220 source: 80.76.43.150
Thu Jan 2 14:12:01 2025: user: root service: ssh target: 37.228.159.220 source: 80.76.43.150
Thu Jan 2 14:07:53 2025: user: root service: ssh target: 37.228.154.27 source: 80.76.43.150
Thu Jan 2 14:07:53 2025: user: root service: ssh target: 37.228.154.27 source: 80.76.43.150
Thu Jan 2 14:07:53 2025: user: root service: ssh target: 37.228.154.27 source: 80.76.43.150
Thu Jan 2 14:07:53 2025: user: root service: ssh target: 37.228.154.27 source: 80.76.43.150
Thu Jan 2 14:07:43 2025: user: root service: ssh target: 37.228.154.27 source: 80.76.43.150
Thu Jan 2 14:07:43 2025: user: root service: ssh target: 37.228.154.27 source: 80.76.43.150
…
Regards,
Profihost AG Team
