Account Number: UK1523400473
Ticket Reference Number: 6a7eec123474393755151f4f
Server: VPS1143613143 - RAM VPS 4 - primary_vps - 88.208.212.211
It has been identified that the above server, currently managed in your Fasthosts account, has been responsible for activities in contravention of our terms & conditions and acceptable use policy.
We have received complaints of spurious network activity from your server to third-party networks. Details of the associated report and logs are included below:
An attempt to brute-force account passwords over SSH/FTP by a machine in your domain or in your network has been detected. Attached are the host who attacks and time / date of activity. Please take the necessary action(s) to stop this activity immediately.
Logfile entries (time is CE(S)T):
Thu Aug 13 20:30:09 2026: user: appartements-bregenzerwald service: ssh target: 77.75.254.60 source: 88.208.212.211
Thu Aug 13 20:30:03 2026: user: xn--brtting-schuhe-hsb service: ssh target: 178.250.14.208 source: 88.208.212.211
Thu Aug 13 20:30:01 2026: user: gratisbild service: ssh target: 85.158.181.16 source: 88.208.212.211
Thu Aug 13 20:29:57 2026: user: holzgeschenk-mit-herz service: ssh target: 37.228.155.23 source: 88.208.212.211
Thu Aug 13 20:29:52 2026: user: xn--holzanznder-zhb service: ssh target: 37.228.156.7 source: 88.208.212.211
Thu Aug 13 20:29:52 2026: user: xn--holzanznder-zhb service: ssh target: 37.228.156.7 source: 88.208.212.211
Thu Aug 13 20:29:51 2026: user: gratisbild service: ssh target: 85.158.181.16 source: 88.208.212.211
Thu Aug 13 20:29:49 2026: user: ledab service: ssh target: 91.151.21.194 source: 88.208.212.211
Thu Aug 13 20:29:49 2026: user: appartements-bregenzerwald service: ssh target: 77.75.254.60 source: 88.208.212.211
Thu Aug 13 20:29:43 2026: user: xn--brtting-schuhe-hsb service: ssh target: 178.250.14.208 source: 88.208.212.211
...
Thu Aug 13 09:55:04 2026: user: test service: ssh target: 178.250.12.17 source: 88.208.212.211
Thu Aug 13 09:54:58 2026: user: test service: ssh target: 37.228.156.165 source: 88.208.212.211
Thu Aug 13 09:54:48 2026: user: test service: ssh target: 77.75.254.60 source: 88.208.212.211
Thu Aug 13 09:54:48 2026: user: test service: ssh target: 77.75.254.60 source: 88.208.212.211
Wed Aug 12 18:58:31 2026: user: daniele service: ssh target: 91.151.21.91 source: 88.208.212.211
Wed Aug 12 18:58:31 2026: user: token service: ssh target: 91.151.21.91 source: 88.208.212.211
Wed Aug 12 17:40:02 2026: user: test service: ssh target: 77.75.252.31 source: 88.208.212.211
Wed Aug 12 17:40:02 2026: user: test service: ssh target: 178.250.12.17 source: 88.208.212.211
Wed Aug 12 17:40:02 2026: user: test service: ssh target: 178.250.12.17 source: 88.208.212.211
Wed Aug 12 17:39:59 2026: user: test service: ssh target: 185.39.220.236 source: 88.208.212.211
Wed Aug 12 17:39:57 2026: user: test service: ssh target: 185.39.220.162 source: 88.208.212.211
Wed Aug 12 17:39:57 2026: user: test service: ssh target: 185.39.220.162 source: 88.208.212.211
...
Tue Aug 11 17:53:04 2026: user: root service: ssh target: 178.250.9.111 source: 88.208.212.211
Tue Aug 11 17:52:54 2026: user: berghuetten service: ssh target: 37.228.153.9 source: 88.208.212.211
Tue Aug 11 16:25:10 2026: user: root service: ssh target: 77.75.252.246 source: 88.208.212.211
Tue Aug 11 16:25:09 2026: user: root service: ssh target: 185.39.220.234 source: 88.208.212.211
Tue Aug 11 16:25:07 2026: user: root service: ssh target: 37.228.156.212 source: 88.208.212.211
Tue Aug 11 16:25:04 2026: user: root service: ssh target: 85.158.181.14 source: 88.208.212.211
Tue Aug 11 16:25:03 2026: user: root service: ssh target: 85.158.181.5 source: 88.208.212.211
Tue Aug 11 16:24:59 2026: user: root service: ssh target: 85.158.181.20 source: 88.208.212.211
Tue Aug 11 16:24:55 2026: user: root service: ssh target: 77.75.250.123 source: 88.208.212.211
Tue Aug 11 16:24:55 2026: user: root service: ssh target: 178.250.15.204 source: 88.208.212.211
...
Sun Aug 9 16:15:05 2026: user: root service: ssh target: 178.250.10.174 source: 88.208.212.211
Sun Aug 9 16:15:00 2026: user: root service: ssh target: 178.250.14.12 source: 88.208.212.211
Sun Aug 9 16:14:59 2026: user: root service: ssh target: 178.250.14.17 source: 88.208.212.211
Sun Aug 9 16:14:49 2026: user: root service: ssh target: 185.39.220.215 source: 88.208.212.211
Sun Aug 9 16:14:48 2026: user: root service: ssh target: 185.39.220.189 source: 88.208.212.211
Sun Aug 9 16:14:45 2026: user: root service: ssh target: 85.158.181.13 source: 88.208.212.211
Sun Aug 9 16:14:18 2026: user: root service: ssh target: 178.250.10.202 source: 88.208.212.211
Sun Aug 9 16:13:56 2026: user: root service: ssh target: 77.75.252.189 source: 88.208.212.211
Sun Aug 9 16:13:47 2026: user: root service: ssh target: 178.250.10.206 source: 88.208.212.211
Sun Aug 9 16:13:38 2026: user: root service: ssh target: 185.39.221.125 source: 88.208.212.211
Please confirm whether you are aware of this activity. If you have identified the issue and are in the process of resolving it, please let us know your planned resolution. If you are unaware of this activity, it is likely that your server has been compromised by malicious software. Please perform a full security audit of your server as soon as possible.
As the account holder you are responsible for the servers held on your account, including all activity and resources used, in accordance with our terms and conditions. We would strongly advise that all services are actively monitored for the presence of unacceptable content as well as any activities in contravention of our terms & conditions.
Under the circumstances presented, could you please reply to this mail as soon as possible providing assurance that this activity will cease immediately and any offending files are removed or edited as appropriate?
We appreciate your cooperation in this matter and look forward to hearing from you as soon as possible.