AR - 1H : (19)  Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : AR 
 NAME ASN : ASN10318 
 
 IP : 152.168.168.134 
 
 CIDR : 152.168.160.0/19 
 
 PREFIX COUNT : 262 
 
 UNIQUE IP COUNT : 2114560 
 
 
 WYKRYTE ATAKI Z ASN10318 :  
  1H - 1 
  3H - 2 
  6H - 2 
 12H - 3 
 24H - 9 
 
 INFO : SYN Flood DDoS Attack Denial-of-Service Attack (DoS) Detected and Blocked by ADMIN  - data recovery 
  https://help-dysk.pl

Invalid user minecraft from 188.131.153.253 port 49351

Sep 11 13:24:09 h2177944 sshd\[5638\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.152.121  user=www-data
Sep 11 13:24:11 h2177944 sshd\[5638\]: Failed password for www-data from 192.99.152.121 port 45764 ssh2
Sep 11 13:30:29 h2177944 sshd\[5907\]: Invalid user test1 from 192.99.152.121 port 53300
Sep 11 13:30:29 h2177944 sshd\[5907\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.152.121
...

@LucianNitescu Personal Honeypot Network <<<>>> Donate at paypal.me/LNitescu <<<>>> 2019-09-11 06:50:34,638 INFO [amun_request_handler] PortScan Detected on Port: 445 (117.240.176.7)

Sep 11 11:27:03 SilenceServices sshd[19849]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.171.150
Sep 11 11:27:05 SilenceServices sshd[19849]: Failed password for invalid user whmcs from 51.75.171.150 port 57992 ssh2
Sep 11 11:33:31 SilenceServices sshd[22276]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.75.171.150

Sep 11 07:44:27 vps200512 sshd\[29208\]: Invalid user vboxvbox from 103.9.159.59
Sep 11 07:44:27 vps200512 sshd\[29208\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.9.159.59
Sep 11 07:44:30 vps200512 sshd\[29208\]: Failed password for invalid user vboxvbox from 103.9.159.59 port 60499 ssh2
Sep 11 07:52:44 vps200512 sshd\[29385\]: Invalid user a from 103.9.159.59
Sep 11 07:52:44 vps200512 sshd\[29385\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.9.159.59

Wed, 2019-08-07 16:09:01 - TCP Packet - Source:101.23.93.41,32932
Destination:,80 - [DVR-HTTP rule match]

Sep 11 14:03:56 ubuntu-2gb-nbg1-dc3-1 sshd[6989]: Failed password for root from 218.98.40.150 port 30203 ssh2
Sep 11 14:04:04 ubuntu-2gb-nbg1-dc3-1 sshd[6989]: error: maximum authentication attempts exceeded for root from 218.98.40.150 port 30203 ssh2 [preauth]
...

Sep 11 11:57:02 localhost sshd\[25126\]: Invalid user Br4pbr4p from 217.182.79.245 port 44254
Sep 11 11:57:02 localhost sshd\[25126\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.79.245
Sep 11 11:57:05 localhost sshd\[25126\]: Failed password for invalid user Br4pbr4p from 217.182.79.245 port 44254 ssh2

Sep 11 03:54:31 plusreed sshd[9718]: Invalid user ubuntu from 193.112.220.76
...

Sep 11 11:56:37 MK-Soft-VM3 sshd\[15679\]: Invalid user sysadmin from 106.12.103.98 port 57318
Sep 11 11:56:37 MK-Soft-VM3 sshd\[15679\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.103.98
Sep 11 11:56:39 MK-Soft-VM3 sshd\[15679\]: Failed password for invalid user sysadmin from 106.12.103.98 port 57318 ssh2
...

\[2019-09-11 07:33:46\] NOTICE\[1827\] chan_sip.c: Registration from '\' failed for '77.247.110.202:57709' - Wrong password
\[2019-09-11 07:33:46\] SECURITY\[1849\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-11T07:33:46.722-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="9418",SessionID="0x7fd9a807e5a8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.202/57709",Challenge="6024b670",ReceivedChallenge="6024b670",ReceivedHash="fda22dd0f13c6aaf764cb31452cc89b3"
\[2019-09-11 07:34:29\] NOTICE\[1827\] chan_sip.c: Registration from '\' failed for '77.247.110.202:52113' - Wrong password
\[2019-09-11 07:34:29\] SECURITY\[1849\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-09-11T07:34:29.455-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="5220",SessionID="0x7fd9a88bc9f8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.202/52113",

$f2bV_matches

Sep 11 11:46:26 game-panel sshd[32525]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.159.32.4
Sep 11 11:46:28 game-panel sshd[32525]: Failed password for invalid user webmaster from 185.159.32.4 port 52398 ssh2
Sep 11 11:52:54 game-panel sshd[347]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.159.32.4

Brute force attempt