Sep 30 10:49:08 MK-Soft-VM6 sshd[29647]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.32.44.197 
Sep 30 10:49:10 MK-Soft-VM6 sshd[29647]: Failed password for invalid user kavo from 178.32.44.197 port 24667 ssh2
...

SSH Brute Force, server-1 sshd[24911]: Failed password for invalid user razvan from 119.61.26.165 port 36639 ssh2

Sep 30 03:45:51 xtremcommunity sshd\[21395\]: Invalid user fava from 138.68.92.121 port 52048
Sep 30 03:45:51 xtremcommunity sshd\[21395\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121
Sep 30 03:45:54 xtremcommunity sshd\[21395\]: Failed password for invalid user fava from 138.68.92.121 port 52048 ssh2
Sep 30 03:54:19 xtremcommunity sshd\[21539\]: Invalid user bis from 138.68.92.121 port 36482
Sep 30 03:54:19 xtremcommunity sshd\[21539\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=138.68.92.121
...

$f2bV_matches

2019-09-30T12:02:25.029390tmaserv sshd\[7460\]: Invalid user renata from 61.69.254.46 port 53424
2019-09-30T12:02:25.033036tmaserv sshd\[7460\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.69.254.46
2019-09-30T12:02:26.857587tmaserv sshd\[7460\]: Failed password for invalid user renata from 61.69.254.46 port 53424 ssh2
2019-09-30T12:07:43.866022tmaserv sshd\[7704\]: Invalid user admin from 61.69.254.46 port 39054
2019-09-30T12:07:43.869621tmaserv sshd\[7704\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=61.69.254.46
2019-09-30T12:07:46.015577tmaserv sshd\[7704\]: Failed password for invalid user admin from 61.69.254.46 port 39054 ssh2
...

Sep 30 09:05:20 hcbbdb sshd\[8299\]: Invalid user rsmith from 209.105.243.145
Sep 30 09:05:20 hcbbdb sshd\[8299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.105.243.145
Sep 30 09:05:23 hcbbdb sshd\[8299\]: Failed password for invalid user rsmith from 209.105.243.145 port 40826 ssh2
Sep 30 09:09:51 hcbbdb sshd\[8790\]: Invalid user ubuntu from 209.105.243.145
Sep 30 09:09:51 hcbbdb sshd\[8790\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=209.105.243.145

\[2019-09-30 04:55:15\] NOTICE\[1948\] chan_sip.c: Registration from '"6666" \' failed for '77.247.109.72:5071' - Wrong password
\[2019-09-30 04:55:15\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-30T04:55:15.645-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6666",SessionID="0x7f1e1c1e96b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.109.72/5071",Challenge="4bc0967b",ReceivedChallenge="4bc0967b",ReceivedHash="5baafe818482a4949c1e64182672e624"
\[2019-09-30 04:55:15\] NOTICE\[1948\] chan_sip.c: Registration from '"6666" \' failed for '77.247.109.72:5071' - Wrong password
\[2019-09-30 04:55:15\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-30T04:55:15.794-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="6666",SessionID="0x7f1e1c86a428",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UD

2019-09-30T08:44:01.556924abusebot-8.cloudsearch.cf sshd\[30134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.217  user=root

Sep 30 10:17:17 vps01 sshd[8549]: Failed password for root from 167.114.55.84 port 39948 ssh2
Sep 30 10:21:11 vps01 sshd[8604]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.114.55.84

Sep 30 10:46:58 relay postfix/smtpd\[23243\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 30 10:48:16 relay postfix/smtpd\[23940\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 30 10:49:28 relay postfix/smtpd\[23926\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 30 10:50:45 relay postfix/smtpd\[23940\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Sep 30 10:51:54 relay postfix/smtpd\[23243\]: warning: unknown\[46.38.144.202\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

Sep 30 06:17:08 dedicated sshd[7561]: Invalid user testuser from 106.13.88.44 port 50032

Sep 29 19:25:43 hcbb sshd\[23627\]: Invalid user alupigus from 189.8.68.56
Sep 29 19:25:43 hcbb sshd\[23627\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.68.56
Sep 29 19:25:46 hcbb sshd\[23627\]: Failed password for invalid user alupigus from 189.8.68.56 port 44450 ssh2
Sep 29 19:31:18 hcbb sshd\[24037\]: Invalid user arkserver from 189.8.68.56
Sep 29 19:31:18 hcbb sshd\[24037\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.8.68.56

23/tcp
[2019-09-30]1pkt

Sep 30 01:28:34 TORMINT sshd\[4192\]: Invalid user jester from 139.199.158.14
Sep 30 01:28:34 TORMINT sshd\[4192\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.199.158.14
Sep 30 01:28:36 TORMINT sshd\[4192\]: Failed password for invalid user jester from 139.199.158.14 port 52504 ssh2
...

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/100.37.20.196/ 
 US - 1H : (1244)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : US 
 NAME ASN : ASN701 
 
 IP : 100.37.20.196 
 
 CIDR : 100.37.0.0/16 
 
 PREFIX COUNT : 7223 
 
 UNIQUE IP COUNT : 40015360 
 
 
 WYKRYTE ATAKI Z ASN701 :  
  1H - 1 
  3H - 2 
  6H - 5 
 12H - 13 
 24H - 30 
 
 INFO : SERVER - Looking for resource vulnerabilities Detected and Blocked by ADMIN  - data recovery