Oct  6 10:43:34 vtv3 sshd\[31133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.20.229  user=root
Oct  6 10:43:35 vtv3 sshd\[31133\]: Failed password for root from 204.48.20.229 port 35500 ssh2
Oct  6 10:47:23 vtv3 sshd\[635\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.20.229  user=root
Oct  6 10:47:25 vtv3 sshd\[635\]: Failed password for root from 204.48.20.229 port 49870 ssh2
Oct  6 10:51:23 vtv3 sshd\[2835\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.20.229  user=root
Oct  6 11:03:16 vtv3 sshd\[8521\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.20.229  user=root
Oct  6 11:03:18 vtv3 sshd\[8521\]: Failed password for root from 204.48.20.229 port 50902 ssh2
Oct  6 11:07:25 vtv3 sshd\[10614\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=204.48.2

Cannabis Extract now Legal to Buy and Ship in All 50 States
Received: from iozwvlku.etsy.com (34.214.240.243) by CO1NAM11FT066.mail.protection.outlook.com (10.13.175.18) with Microsoft SMTP Server id 15.20.2327.20 via Frontend Transport; OriginalChecksum:BA58F0981B5278598818305954905C0BEC132D5F546F215A29C063CAA54C8FF7;UpperCasedChecksum:959C8795BC6D643E3735B3E5C75C01CE7B99248648E408290D3B4B1C3321A749;SizeAsReceived:525;Count:9 From: Healthy Life  Subject: CBDOil Legal in All 50 States Reply-To: Received: from 3kosmizkonterichTnelmilknchter.com(172.31.63.55) by 3kosmizkonterichTnelmilknchter.com id KFmjY9xcv1l6 for ; (envelope-from  To: joycemarie1212@hotmail.com 
Message-ID: <13afd2ac-95f7-4547-b873-bfb31eca486b@CO1NAM11FT066.eop-nam11.prod.protection.outlook.com> Return-Path: bounce@4kosmizkonterichlBelmilknchter.com X-SID-PRA: FROM@4KOSMIZKONTERICHXWELMILKNCHTER.COM Result: NONE

Oct  6 08:17:09 xtremcommunity sshd\[240557\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.76.6  user=root
Oct  6 08:17:12 xtremcommunity sshd\[240557\]: Failed password for root from 178.128.76.6 port 52074 ssh2
Oct  6 08:21:18 xtremcommunity sshd\[240807\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.76.6  user=root
Oct  6 08:21:20 xtremcommunity sshd\[240807\]: Failed password for root from 178.128.76.6 port 35044 ssh2
Oct  6 08:25:27 xtremcommunity sshd\[241033\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.76.6  user=root
...

2019-10-06T12:02:52.666571shield sshd\[6736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.242.240.35.bc.googleusercontent.com  user=root
2019-10-06T12:02:54.828958shield sshd\[6736\]: Failed password for root from 35.240.242.87 port 50098 ssh2
2019-10-06T12:07:27.614637shield sshd\[7167\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.242.240.35.bc.googleusercontent.com  user=root
2019-10-06T12:07:29.862213shield sshd\[7167\]: Failed password for root from 35.240.242.87 port 33328 ssh2
2019-10-06T12:12:03.234004shield sshd\[7626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=87.242.240.35.bc.googleusercontent.com  user=root

Oct  6 14:49:07 MK-Soft-VM3 sshd[1497]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=91.121.136.44 
Oct  6 14:49:09 MK-Soft-VM3 sshd[1497]: Failed password for invalid user Hawaii@2017 from 91.121.136.44 port 49802 ssh2
...

Ref: mx Logwatch report

[munged]::443 178.77.90.220 - - [06/Oct/2019:13:48:45 +0200] "POST /[munged]: HTTP/1.1" 200 7918 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

Oct  6 15:08:14 server sshd[37020]: Failed password for root from 222.186.173.119 port 60515 ssh2
Oct  6 15:08:17 server sshd[37020]: Failed password for root from 222.186.173.119 port 60515 ssh2
Oct  6 15:08:19 server sshd[37020]: Failed password for root from 222.186.173.119 port 60515 ssh2

Oct  6 14:57:01 dcd-gentoo sshd[18312]: User root from 49.88.112.90 not allowed because none of user's groups are listed in AllowGroups
Oct  6 14:57:04 dcd-gentoo sshd[18312]: error: PAM: Authentication failure for illegal user root from 49.88.112.90
Oct  6 14:57:01 dcd-gentoo sshd[18312]: User root from 49.88.112.90 not allowed because none of user's groups are listed in AllowGroups
Oct  6 14:57:04 dcd-gentoo sshd[18312]: error: PAM: Authentication failure for illegal user root from 49.88.112.90
Oct  6 14:57:01 dcd-gentoo sshd[18312]: User root from 49.88.112.90 not allowed because none of user's groups are listed in AllowGroups
Oct  6 14:57:04 dcd-gentoo sshd[18312]: error: PAM: Authentication failure for illegal user root from 49.88.112.90
Oct  6 14:57:04 dcd-gentoo sshd[18312]: Failed keyboard-interactive/pam for invalid user root from 49.88.112.90 port 33884 ssh2
...

Automated report (2019-10-06T11:48:51+00:00). Script injection detected in user agent.

B: Abusive content scan (301)

Oct  6 14:48:56 bouncer sshd\[14279\]: Invalid user Automation-123 from 171.84.2.4 port 42220
Oct  6 14:48:56 bouncer sshd\[14279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.84.2.4 
Oct  6 14:48:58 bouncer sshd\[14279\]: Failed password for invalid user Automation-123 from 171.84.2.4 port 42220 ssh2
...

Oct  6 13:48:13 mail sshd[19328]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.56.121  user=root
Oct  6 13:48:16 mail sshd[19328]: Failed password for root from 139.59.56.121 port 56042 ssh2
...

SSH Brute-Force reported by Fail2Ban

Oct  6 13:59:49 arianus sshd\[31497\]: Unable to negotiate with 42.116.255.216 port 34933: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\]
...