2019-10-07T07:33:16.890131abusebot-8.cloudsearch.cf sshd\[13046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.208  user=root

Oct  6 23:48:32 debian sshd[12530]: Unable to negotiate with 218.92.0.191 port 28177: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
Oct  6 23:49:18 debian sshd[12532]: Unable to negotiate with 218.92.0.191 port 58643: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 [preauth]
...

Oct  7 09:09:39 vpn01 sshd[8697]: Failed password for root from 167.114.97.209 port 53636 ssh2
...

Oct  7 05:49:13 [munged] sshd[7090]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=110.78.147.185

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/23.239.119.98/ 
 US - 1H : (686)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : US 
 NAME ASN : ASN53850 
 
 IP : 23.239.119.98 
 
 CIDR : 23.239.118.0/23 
 
 PREFIX COUNT : 75 
 
 UNIQUE IP COUNT : 62208 
 
 
 WYKRYTE ATAKI Z ASN53850 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-07 05:48:17 
 
 INFO : Looking for resource vulnerabilities 403 Detected and Blocked by ADMIN  - data recovery

Oct  7 04:17:42 thevastnessof sshd[5992]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.74
...

Oct  6 20:22:50 wbs sshd\[30249\]: Invalid user Orange@2017 from 106.12.203.210
Oct  6 20:22:50 wbs sshd\[30249\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.203.210
Oct  6 20:22:53 wbs sshd\[30249\]: Failed password for invalid user Orange@2017 from 106.12.203.210 port 52044 ssh2
Oct  6 20:27:23 wbs sshd\[30641\]: Invalid user P@55W0RD1 from 106.12.203.210
Oct  6 20:27:23 wbs sshd\[30641\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.203.210

Oct  7 04:45:56 thevastnessof sshd[7790]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=162.247.74.27
...

Oct  7 09:08:18 mout sshd[27867]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.239.220.70  user=root
Oct  7 09:08:20 mout sshd[27867]: Failed password for root from 170.239.220.70 port 51149 ssh2

Oct  7 00:54:05 microserver sshd[52042]: Invalid user admin from 102.165.35.137 port 2799
Oct  7 00:54:05 microserver sshd[52042]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.165.35.137
Oct  7 00:54:06 microserver sshd[52042]: Failed password for invalid user admin from 102.165.35.137 port 2799 ssh2
Oct  7 00:54:08 microserver sshd[52047]: Invalid user admin from 102.165.35.137 port 4143
Oct  7 00:54:08 microserver sshd[52047]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.165.35.137
Oct  7 06:29:51 microserver sshd[33880]: Invalid user admin from 102.165.35.137 port 2543
Oct  7 06:29:51 microserver sshd[33880]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=102.165.35.137
Oct  7 06:29:53 microserver sshd[33880]: Failed password for invalid user admin from 102.165.35.137 port 2543 ssh2
Oct  7 06:29:56 microserver sshd[33889]: Invalid user admin from 102.165.35.137 port 3788
Oc

Oct  6 18:53:30 wbs sshd\[22320\]: Invalid user P@\$\$WORD123!@\# from 193.112.143.141
Oct  6 18:53:30 wbs sshd\[22320\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.143.141
Oct  6 18:53:32 wbs sshd\[22320\]: Failed password for invalid user P@\$\$WORD123!@\# from 193.112.143.141 port 39250 ssh2
Oct  6 18:57:39 wbs sshd\[22734\]: Invalid user Welcome\#123 from 193.112.143.141
Oct  6 18:57:39 wbs sshd\[22734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=193.112.143.141

SSH Brute Force, server-1 sshd[22294]: Failed password for root from 222.186.15.110 port 21556 ssh2

Oct  6 23:43:22 lanister sshd[18067]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.249.170  user=root
Oct  6 23:43:25 lanister sshd[18067]: Failed password for root from 200.196.249.170 port 44324 ssh2
Oct  6 23:48:19 lanister sshd[18129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.196.249.170  user=root
Oct  6 23:48:21 lanister sshd[18129]: Failed password for root from 200.196.249.170 port 55626 ssh2
...

Received: from avewhyqfn.twitter.com (34.255.137.37) by HE1EUR01FT053.mail.protection.outlook.com (10.152.1.73) with Microsoft SMTP Server id 15.20.2327.20 via Frontend Transport; OriginalChecksum:26A3E1573AE48E4792CC43348A6E6E84A73ED86AF681766293469D7C2496E025;UpperCasedChecksum:761735792863CC1A1D1351AB0560C9EF1B1AF2A3604670E9D644A261040E547E;SizeAsReceived:513;Count:9 From: LawsuitWinning  Subject: Free case evaluation Reply-To: Received: from 3colosikiladoreIKayuklawdonet.com (172.31.16.32) by 3colosikiladoreIKayuklawdonet.com id m5kkMJRFFXJi for ; Sun, 06 Oct 2019 23:24:52 +0200 (envelope-from  To: joycemarie1212@hotmail.com Message-ID:  Return-Path: from@2colosikiladoreZFayuklawdonet.com 
X-SID-PRA: FROM@5COLOSIKILADORELDAYUKLAWDONET.COM X-SID-Result: NONE

Oct  7 10:00:42 legacy sshd[15458]: Failed password for root from 218.92.0.198 port 20505 ssh2
Oct  7 10:00:44 legacy sshd[15458]: Failed password for root from 218.92.0.198 port 20505 ssh2
Oct  7 10:00:47 legacy sshd[15458]: Failed password for root from 218.92.0.198 port 20505 ssh2
...