Oct  3 22:38:29 heissa sshd\[22924\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.112.58.134  user=root
Oct  3 22:38:30 heissa sshd\[22924\]: Failed password for root from 114.112.58.134 port 45228 ssh2
Oct  3 22:43:09 heissa sshd\[23686\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.112.58.134  user=root
Oct  3 22:43:11 heissa sshd\[23686\]: Failed password for root from 114.112.58.134 port 57142 ssh2
Oct  3 22:47:47 heissa sshd\[24326\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.112.58.134  user=root

\[2019-10-03 23:59:09\] NOTICE\[1948\] chan_sip.c: Registration from '"379" \' failed for '77.247.108.220:5247' - Wrong password
\[2019-10-03 23:59:09\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-03T23:59:09.112-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="379",SessionID="0x7f1e1c3b69e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.108.220/5247",Challenge="185bed2d",ReceivedChallenge="185bed2d",ReceivedHash="623cf3e0b9e09b5b13179037a49ba3a7"
\[2019-10-03 23:59:09\] NOTICE\[1948\] chan_sip.c: Registration from '"379" \' failed for '77.247.108.220:5247' - Wrong password
\[2019-10-03 23:59:09\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-03T23:59:09.276-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="379",SessionID="0x7f1e1cb9f6d8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/7

" "

$f2bV_matches

Oct  4 05:59:30 jane sshd[18215]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=94.177.240.4 
Oct  4 05:59:31 jane sshd[18215]: Failed password for invalid user Fragrance!23 from 94.177.240.4 port 33540 ssh2
...

Distributed brute force attack

Oct  4 06:53:46 server sshd\[4885\]: User root from 106.13.119.163 not allowed because listed in DenyUsers
Oct  4 06:53:46 server sshd\[4885\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.119.163  user=root
Oct  4 06:53:49 server sshd\[4885\]: Failed password for invalid user root from 106.13.119.163 port 52516 ssh2
Oct  4 06:59:33 server sshd\[1196\]: User root from 106.13.119.163 not allowed because listed in DenyUsers
Oct  4 06:59:33 server sshd\[1196\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.119.163  user=root

Oct  4 06:59:26 www5 sshd\[36031\]: Invalid user P@sswd123!@\# from 196.38.70.24
Oct  4 06:59:26 www5 sshd\[36031\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=196.38.70.24
Oct  4 06:59:28 www5 sshd\[36031\]: Failed password for invalid user P@sswd123!@\# from 196.38.70.24 port 43172 ssh2
...

(From gretchen.nichols779@gmail.com) Greetings!

While potential or returning clients are browsing on your website, it's essential for their experience to be a comfortable and easy task while at the same time aesthetically pleasing. How would you like your website to be more attractive and engaging to more clients with the help of web design? If your site is beautiful, can be easily navigated, and the info they need is right where it should be, you can be confident that they will be buying your products/services. All that can be achieved at an affordable cost.

I'll provide you with a free consultation to show you my web design ideas that best fit your business. I can also send you my portfolio of websites I've done in the past so you'll be more familiar with the work I do. Please inform me about when's the best time to give you a call. Talk to you soon!

Sincerely,
Gretchen Nichols

Oct  4 05:59:44 MK-Soft-VM6 sshd[11850]: Failed password for root from 49.88.112.80 port 14690 ssh2
Oct  4 05:59:46 MK-Soft-VM6 sshd[11850]: Failed password for root from 49.88.112.80 port 14690 ssh2
...

2019-10-04T03:59:24.372099abusebot-4.cloudsearch.cf sshd\[27044\]: Invalid user Windows@1 from 41.214.139.226 port 38762

CloudCIX Reconnaissance Scan Detected, PTR: 195-154-237-102.rev.poneytelecom.eu.

Oct  3 17:55:15 php1 sshd\[830\]: Invalid user Jaqueline1@3 from 118.140.251.106
Oct  3 17:55:15 php1 sshd\[830\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.140.251.106
Oct  3 17:55:17 php1 sshd\[830\]: Failed password for invalid user Jaqueline1@3 from 118.140.251.106 port 56600 ssh2
Oct  3 17:59:54 php1 sshd\[1342\]: Invalid user 123Chicken from 118.140.251.106
Oct  3 17:59:54 php1 sshd\[1342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.140.251.106

Oct  4 05:52:50 localhost sshd\[14194\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.14.163.172  user=root
Oct  4 05:52:52 localhost sshd\[14194\]: Failed password for root from 216.14.163.172 port 21983 ssh2
Oct  4 05:59:27 localhost sshd\[15197\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=216.14.163.172  user=root

Oct  4 05:55:06 MK-Soft-Root2 sshd[27276]: Failed password for root from 43.231.61.146 port 40968 ssh2
...