Nov 28 10:44:44 root sshd[11413]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78 
Nov 28 10:44:45 root sshd[11413]: Failed password for invalid user !@Shieryue@caihongdao@)! from 210.10.210.78 port 43898 ssh2
Nov 28 10:52:16 root sshd[11542]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78 
...

$f2bV_matches

Nov  2 17:15:33 srv206 sshd[18550]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210-10-210-78.mel.static-ipl.aapt.com.au  user=root
Nov  2 17:15:35 srv206 sshd[18550]: Failed password for root from 210.10.210.78 port 47980 ssh2
...

Nov  1 21:15:37 MK-Soft-VM4 sshd[15193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78 
Nov  1 21:15:39 MK-Soft-VM4 sshd[15193]: Failed password for invalid user password from 210.10.210.78 port 57466 ssh2
...

Oct 30 18:28:42 php1 sshd\[14984\]: Invalid user login from 210.10.210.78
Oct 30 18:28:42 php1 sshd\[14984\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210-10-210-78.mel.static-ipl.aapt.com.au
Oct 30 18:28:44 php1 sshd\[14984\]: Failed password for invalid user login from 210.10.210.78 port 53522 ssh2
Oct 30 18:33:29 php1 sshd\[15522\]: Invalid user testuser from 210.10.210.78
Oct 30 18:33:29 php1 sshd\[15522\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210-10-210-78.mel.static-ipl.aapt.com.au

Oct 18 22:07:45 OPSO sshd\[359\]: Invalid user n from 210.10.210.78 port 38582
Oct 18 22:07:45 OPSO sshd\[359\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78
Oct 18 22:07:47 OPSO sshd\[359\]: Failed password for invalid user n from 210.10.210.78 port 38582 ssh2
Oct 18 22:12:33 OPSO sshd\[1173\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78  user=root
Oct 18 22:12:35 OPSO sshd\[1173\]: Failed password for root from 210.10.210.78 port 49266 ssh2

Oct 10 19:46:58 server sshd\[27495\]: User root from 210.10.210.78 not allowed because listed in DenyUsers
Oct 10 19:46:58 server sshd\[27495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78  user=root
Oct 10 19:47:00 server sshd\[27495\]: Failed password for invalid user root from 210.10.210.78 port 47032 ssh2
Oct 10 19:52:15 server sshd\[32383\]: User root from 210.10.210.78 not allowed because listed in DenyUsers
Oct 10 19:52:15 server sshd\[32383\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78  user=root

Sep 26 19:50:40 bouncer sshd\[13800\]: Invalid user teste from 210.10.210.78 port 49166
Sep 26 19:50:40 bouncer sshd\[13800\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78 
Sep 26 19:50:42 bouncer sshd\[13800\]: Failed password for invalid user teste from 210.10.210.78 port 49166 ssh2
...

Sep 15 06:28:42 eventyay sshd[16220]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78
Sep 15 06:28:44 eventyay sshd[16220]: Failed password for invalid user 0 from 210.10.210.78 port 59102 ssh2
Sep 15 06:34:06 eventyay sshd[16343]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78
...

Aug 31 05:07:14 hb sshd\[11876\]: Invalid user zabbix from 210.10.210.78
Aug 31 05:07:14 hb sshd\[11876\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210-10-210-78.mel.static-ipl.aapt.com.au
Aug 31 05:07:16 hb sshd\[11876\]: Failed password for invalid user zabbix from 210.10.210.78 port 40596 ssh2
Aug 31 05:12:28 hb sshd\[12319\]: Invalid user garfield from 210.10.210.78
Aug 31 05:12:28 hb sshd\[12319\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210-10-210-78.mel.static-ipl.aapt.com.au

Aug 20 18:55:17 dev0-dcfr-rnet sshd[8775]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78
Aug 20 18:55:19 dev0-dcfr-rnet sshd[8775]: Failed password for invalid user hk from 210.10.210.78 port 46976 ssh2
Aug 20 19:00:43 dev0-dcfr-rnet sshd[8796]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78

Aug 18 15:30:26 web9 sshd\[25750\]: Invalid user rob from 210.10.210.78
Aug 18 15:30:27 web9 sshd\[25750\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78
Aug 18 15:30:28 web9 sshd\[25750\]: Failed password for invalid user rob from 210.10.210.78 port 53176 ssh2
Aug 18 15:35:37 web9 sshd\[26687\]: Invalid user hps from 210.10.210.78
Aug 18 15:35:37 web9 sshd\[26687\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78

Aug 16 18:11:59 dev0-dcde-rnet sshd[5994]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78
Aug 16 18:12:01 dev0-dcde-rnet sshd[5994]: Failed password for invalid user oracle from 210.10.210.78 port 48614 ssh2
Aug 16 18:17:37 dev0-dcde-rnet sshd[6039]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78

2019-08-12T05:11:53.715959abusebot-7.cloudsearch.cf sshd\[26085\]: Invalid user bsnl from 210.10.210.78 port 55378

Aug 11 08:47:04 yesfletchmain sshd\[26424\]: Invalid user andrea from 210.10.210.78 port 39444
Aug 11 08:47:04 yesfletchmain sshd\[26424\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78
Aug 11 08:47:07 yesfletchmain sshd\[26424\]: Failed password for invalid user andrea from 210.10.210.78 port 39444 ssh2
Aug 11 08:52:37 yesfletchmain sshd\[26501\]: Invalid user user1 from 210.10.210.78 port 32986
Aug 11 08:52:37 yesfletchmain sshd\[26501\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78
...

Jul 30 15:58:25 [host] sshd[4974]: Invalid user oracle from 210.10.210.78
Jul 30 15:58:25 [host] sshd[4974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78
Jul 30 15:58:27 [host] sshd[4974]: Failed password for invalid user oracle from 210.10.210.78 port 59972 ssh2

2019-07-16T12:45:10.022014abusebot-4.cloudsearch.cf sshd\[29322\]: Invalid user postgres from 210.10.210.78 port 35418

Jul  8 11:15:08 SilenceServices sshd[29615]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78
Jul  8 11:15:10 SilenceServices sshd[29615]: Failed password for invalid user solr from 210.10.210.78 port 34672 ssh2
Jul  8 11:17:35 SilenceServices sshd[31207]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78

Jul  1 06:15:23 srv03 sshd\[10808\]: Invalid user ting from 210.10.210.78 port 33954
Jul  1 06:15:23 srv03 sshd\[10808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=210.10.210.78
Jul  1 06:15:26 srv03 sshd\[10808\]: Failed password for invalid user ting from 210.10.210.78 port 33954 ssh2

firewall-block, port(s): 23/tcp

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/83.20.195.62/ 
 
 PL - 1H : (65)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : PL 
 NAME ASN : ASN5617 
 
 IP : 83.20.195.62 
 
 CIDR : 83.20.0.0/14 
 
 PREFIX COUNT : 183 
 
 UNIQUE IP COUNT : 5363456 
 
 
 ATTACKS DETECTED ASN5617 :  
  1H - 11 
  3H - 17 
  6H - 22 
 12H - 39 
 24H - 42 
 
 DateTime : 2019-12-10 07:30:13 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

$f2bV_matches

/editBlackAndWhiteList

Dec 10 08:28:11 mail sshd[974]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243 
Dec 10 08:28:13 mail sshd[974]: Failed password for invalid user maxiaoli from 139.59.0.243 port 37444 ssh2
Dec 10 08:34:12 mail sshd[2689]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.0.243

Dec 10 08:37:56 ns381471 sshd[15183]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=175.197.233.197
Dec 10 08:37:59 ns381471 sshd[15183]: Failed password for invalid user factorio from 175.197.233.197 port 53388 ssh2

Dec 10 08:47:27 arianus sshd\[25740\]: Unable to negotiate with 218.92.0.171 port 62596: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1,diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1 \[preauth\]
...

Dec 10 08:51:59 relay postfix/smtpd\[3699\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.137\]: 554 5.7.1 \: Relay access denied\; from=\<817n41a9fzyun5h@slon.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>
Dec 10 08:51:59 relay postfix/smtpd\[3699\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.137\]: 554 5.7.1 \: Relay access denied\; from=\<817n41a9fzyun5h@slon.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>
Dec 10 08:51:59 relay postfix/smtpd\[3699\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.137\]: 554 5.7.1 \: Relay access denied\; from=\<817n41a9fzyun5h@slon.ru\> to=\ proto=ESMTP helo=\<\[181.41.216.131\]\>
Dec 10 08:51:59 relay postfix/smtpd\[3699\]: NOQUEUE: reject: RCPT from unknown\[181.41.216.137\]: 554 5.7.1 \: Relay access denied\; from=\<817n41a9fzyun5h@slon.ru\> to=\

Dec 10 08:37:32 minden010 sshd[27420]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.155.228.16
Dec 10 08:37:34 minden010 sshd[27420]: Failed password for invalid user grid from 24.155.228.16 port 51830 ssh2
Dec 10 08:43:16 minden010 sshd[29417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=24.155.228.16
...

Dec 10 07:43:54 mail1 sshd\[8725\]: Invalid user http from 41.82.208.179 port 47333
Dec 10 07:43:54 mail1 sshd\[8725\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.82.208.179
Dec 10 07:43:56 mail1 sshd\[8725\]: Failed password for invalid user http from 41.82.208.179 port 47333 ssh2
Dec 10 07:55:45 mail1 sshd\[14141\]: Invalid user http from 41.82.208.179 port 52156
Dec 10 07:55:45 mail1 sshd\[14141\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.82.208.179
...

Dec 10 02:32:34 plusreed sshd[15397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=167.71.215.72  user=root
Dec 10 02:32:36 plusreed sshd[15397]: Failed password for root from 167.71.215.72 port 54723 ssh2
...

Invalid user ht from 179.191.224.126 port 43236
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.191.224.126
Failed password for invalid user ht from 179.191.224.126 port 43236 ssh2
pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=179.191.224.126  user=root
Failed password for root from 179.191.224.126 port 51116 ssh2

SSH auth scanning - multiple failed logins

2019-12-10T02:37:35.462025xentho-1 sshd[8009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.62  user=root
2019-12-10T02:37:38.131045xentho-1 sshd[8009]: Failed password for root from 49.88.112.62 port 34593 ssh2
2019-12-10T02:37:42.091046xentho-1 sshd[8009]: Failed password for root from 49.88.112.62 port 34593 ssh2
2019-12-10T02:37:35.462025xentho-1 sshd[8009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.62  user=root
2019-12-10T02:37:38.131045xentho-1 sshd[8009]: Failed password for root from 49.88.112.62 port 34593 ssh2
2019-12-10T02:37:42.091046xentho-1 sshd[8009]: Failed password for root from 49.88.112.62 port 34593 ssh2
2019-12-10T02:37:35.462025xentho-1 sshd[8009]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.62  user=root
2019-12-10T02:37:38.131045xentho-1 sshd[8009]: Failed password for root from 49.88.112.62 port 3459
...

Dec 10 08:39:16 MK-Soft-VM6 sshd[9516]: Failed password for root from 117.173.67.119 port 2431 ssh2
Dec 10 08:44:41 MK-Soft-VM6 sshd[9586]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=117.173.67.119 
...