An attempt to brute-force account passwords over SSH/FTP by a machine in your domain or in your network has been detected. Attached are the host who attacks and time / date of activity. Please take the necessary action(s) to stop this activity immediately. If you have any questions please reply to this email.
Host of attacker: 80.71.227.155 => => Responsible email contacts: abuse@spacecore.pro,ripe@interlir.com
Attacked hosts in our Network: 178.250.14.198, 178.250.9.98, 37.228.154.89, 77.75.253.150, 178.250.10.134, 185.39.221.105, 178.250.12.87, 185.39.221.238, 178.250.9.91, 178.250.12.75, 37.228.155.23, 178.250.10.224, 81.88.33.120, 77.75.249.19, 178.250.9.222, 37.228.159.207, 178.250.9.30, 185.39.221.223, 77.75.254.48, 37.228.155.144, 37.228.155.45, 85.158.181.23, 37.228.155.107
Logfile entries (time is CE(S)T):
Fri Oct 25 05:24:57 2024: user: wist service: ssh target: 85.158.181.23 source: 80.71.227.155
Fri Oct 25 05:24:29 2024: user: root service: ssh target: 77.75.254.48 source: 80.71.227.155
Fri Oct 25 05:07:11 2024: user: car service: ssh target: 178.250.14.198 source: 80.71.227.155
Fri Oct 25 05:06:24 2024: user: car service: ssh target: 178.250.12.75 source: 80.71.227.155
Fri Oct 25 05:06:20 2024: user: car service: ssh target: 178.250.9.30 source: 80.71.227.155
Fri Oct 25 05:06:13 2024: user: car service: ssh target: 77.75.249.19 source: 80.71.227.155
Fri Oct 25 05:06:07 2024: user: car service: ssh target: 178.250.9.91 source: 80.71.227.155
Fri Oct 25 05:05:59 2024: user: car service: ssh target: 37.228.155.23 source: 80.71.227.155
Fri Oct 25 05:05:21 2024: user: root service: ssh target: 178.250.14.198 source: 80.71.227.155
Fri Oct 25 05:04:40 2024: user: root service: ssh target: 178.250.9.30 source: 80.71.227.155
Fri Oct 25 05:04:34 2024: user: root service: ssh target: 178.250.12.75 source: 80.71.227.155
Fri Oct 25 05:04:33 2024: user: root service: ssh target: 77.75.249.19 source: 80.71.227.155
Fri Oct 25 05:04:27 2024: user: root service: ssh target: 178.250.9.91 source: 80.71.227.155
Fri Oct 25 05:04:19 2024: user: root service: ssh target: 37.228.155.23 source: 80.71.227.155
Fri Oct 25 05:04:11 2024: user: cfabllc service: ssh target: 178.250.14.198 source: 80.71.227.155
Fri Oct 25 05:03:24 2024: user: cfabllc service: ssh target: 178.250.12.75 source: 80.71.227.155
Fri Oct 25 05:03:23 2024: user: cfabllc service: ssh target: 77.75.249.19 source: 80.71.227.155
Fri Oct 25 05:03:20 2024: user: cfabllc service: ssh target: 178.250.9.30 source: 80.71.227.155
Fri Oct 25 05:03:09 2024: user: cfabllc service: ssh target: 37.228.155.23 source: 80.71.227.155
Fri Oct 25 05:03:07 2024: user: cfabllc service: ssh target: 178.250.9.91 source: 80.71.227.155
Fri Oct 25 05:02:51 2024: user: partner service: ssh target: 178.250.14.198 source: 80.71.227.155
Fri Oct 25 05:02:10 2024: user: partner service: ssh target: 178.250.9.30 source: 80.71.227.155
Fri Oct 25 05:02:04 2024: user: partner service: ssh target: 178.250.12.75 source: 80.71.227.155
Fri Oct 25 05:02:03 2024: user: partner service: ssh target: 77.75.249.19 source: 80.71.227.155
Fri Oct 25 05:01:57 2024: user: partner service: ssh target: 178.250.9.91 source: 80.71.227.155
Fri Oct 25 05:01:49 2024: user: partner service: ssh target: 37.228.155.23 source: 80.71.227.155
Fri Oct 25 05:01:31 2024: user: guest service: ssh target: 178.250.14.198 source: 80.71.227.155
Fri Oct 25 05:00:50 2024: user: guest service: ssh target: 178.250.9.30 source: 80.71.227.155
Fri Oct 25 05:00:44 2024: user: guest service: ssh target: 178.250.12.75 source: 80.71.227.155
Fri Oct 25 05:00:43 2024: user: guest service: ssh target: 77.75.249.19 source: 80.71.227.155
Fri Oct 25 05:00:29 2024: user: guest service: ssh target: 37.228.155.23 source: 80.71.227.155
Fri Oct 25 05:00:27 2024: user: guest service: ssh target: 178.250.9.91 source: 80.71.227.155
Fri Oct 25 05:00:11 2024: user: flutter service: ssh target: 178.250.14.198 source: 80.71.227.155
Fri Oct 25 04:59:24 2024: user: flutter service: ssh target: 178.250.12.75 source: 80.71.227.155
Fri Oct 25 04:59:20 2024: user: flutter service: ssh target: 178.250.9.30 source: 80.71.227.155
Fri Oct 25 04:59:13 2024: user: flutter service: ssh target: 77.75.249.19 source: 80.71.227.155
Fri Oct 25 04:59:07 2024: user: flutter service: ssh target: 178.250.9.91 source: 80.71.227.155
Fri Oct 25 04:58:59 2024: user: flutter service: ssh target: 37.228.155.23 source: 80.71.227.155
Fri Oct 25 04:58:51 2024: user: sumit service: ssh target: 178.250.14.198 source: 80.71.227.155
Fri Oct 25 04:58:04 2024: user: sumit service: ssh target: 178.250.12.75 source: 80.71.227.155
Fri Oct 25 04:58:00 2024: user: sumit service: ssh target: 178.250.9.30 source: 80.71.227.155
Fri Oct 25 04:57:53 2024: user: sumit service: ssh target: 77.75.249.19 source: 80.71.227.155
Fri Oct 25 04:57:47 2024: user: sumit service: ssh target: 178.250.9.91 source: 80.71.227.155
Fri Oct 25 04:57:39 2024: user: sumit service: ssh target: 37.228.155.23 source: 80.71.227.155
Fri Oct 25 04:57:21 2024: user: med service: ssh target: 178.250.14.198 source: 80.71.227.155
Fri Oct 25 04:54:24 2024: user: med service: ssh target: 178.250.12.75 source: 80.71.227.155
Fri Oct 25 04:54:20 2024: user: med service: ssh target: 178.250.9.30 source: 80.71.227.155
Fri Oct 25 04:54:03 2024: user: med service: ssh target: 77.75.249.19 source: 80.71.227.155
Fri Oct 25 04:53:17 2024: user: med service: ssh target: 178.250.9.91 source: 80.71.227.155
