We are writing to notify you of malicious activity originating from an IP address within your network (ASN: AS198037). Source IP : 78.17.132.133 ASN : AS198037 First seen: 2026-10-20T17:50:33.552Z Last seen : 2026-10-20T18:08:36.516Z Total attacks observed: 20 Case reference: 2c6e068a-f835-4f8c-b330-b002244d957c We kindly ask you to investigate and take the necessary steps to stop this activity. A full machine-readable evidence report in XARF format is attached to this email. Attack samples: --- Attack sample 1 --- Timestamp : 2026-10-20T18:08:36.516941 Source IP : 78.17.132.133 Attack type: SSH_BRUTE_FORCE Evidence : Failed password for invalid user jyh from 78.17.132.133 port 34594 ssh2 --- Attack sample 2 --- Timestamp : 2026-10-20T18:07:43.537529 Source IP : 78.17.132.133 Attack type: SSH_BRUTE_FORCE Evidence : Failed password for invalid user admin from 78.17.132.133 port 39298 ssh2 --- Attack sample 3 --- Timestamp : 2026-10-20T18:06:50.777830 Source IP : 78.17.132.133 Attack type: SSH_BRUTE_FORCE Evidence : Failed password for root from 78.17.132.133 port 58764 ssh2 --- Attack sample 4 --- Timestamp : 2026-10-20T18:05:47.948446 Source IP : 78.17.132.133 Attack type: SSH_BRUTE_FORCE Evidence : Failed password for root from 78.17.132.133 port 36566 ssh2 --- Attack sample 5 --- Timestamp : 2026-10-20T18:04:52.941931 Source IP : 78.17.132.133 Attack type: SSH_BRUTE_FORCE Evidence : Failed password for root from 78.17.132.133 port 59988 ssh2
