Oct  7 10:56:30 server sshd\[24171\]: User root from 176.79.135.185 not allowed because listed in DenyUsers
Oct  7 10:56:30 server sshd\[24171\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.79.135.185  user=root
Oct  7 10:56:32 server sshd\[24171\]: Failed password for invalid user root from 176.79.135.185 port 58260 ssh2
Oct  7 11:01:48 server sshd\[17692\]: User root from 176.79.135.185 not allowed because listed in DenyUsers
Oct  7 11:01:48 server sshd\[17692\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=176.79.135.185  user=root

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/156.223.150.203/ 
 EG - 1H : (97)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : EG 
 NAME ASN : ASN8452 
 
 IP : 156.223.150.203 
 
 CIDR : 156.223.128.0/19 
 
 PREFIX COUNT : 833 
 
 UNIQUE IP COUNT : 7610368 
 
 
 WYKRYTE ATAKI Z ASN8452 :  
  1H - 1 
  3H - 3 
  6H - 12 
 12H - 28 
 24H - 87 
 
 DateTime : 2019-10-07 05:47:31 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

Automatic report - Banned IP Access

Oct  7 07:39:04 OPSO sshd\[3622\]: Invalid user Whiskey@2017 from 62.4.28.247 port 48186
Oct  7 07:39:04 OPSO sshd\[3622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.4.28.247
Oct  7 07:39:06 OPSO sshd\[3622\]: Failed password for invalid user Whiskey@2017 from 62.4.28.247 port 48186 ssh2
Oct  7 07:43:16 OPSO sshd\[4349\]: Invalid user 123Action from 62.4.28.247 port 48768
Oct  7 07:43:16 OPSO sshd\[4349\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.4.28.247

Unauthorised access (Oct  7) SRC=61.89.75.176 LEN=40 PREC=0x20 TTL=42 ID=35758 TCP DPT=8080 WINDOW=14527 SYN 
Unauthorised access (Oct  7) SRC=61.89.75.176 LEN=40 PREC=0x20 TTL=42 ID=45289 TCP DPT=8080 WINDOW=14527 SYN 
Unauthorised access (Oct  6) SRC=61.89.75.176 LEN=40 PREC=0x20 TTL=42 ID=38059 TCP DPT=8080 WINDOW=14527 SYN 
Unauthorised access (Oct  6) SRC=61.89.75.176 LEN=40 PREC=0x20 TTL=42 ID=43108 TCP DPT=8080 WINDOW=14527 SYN

Oct  7 04:05:13 www_kotimaassa_fi sshd[21939]: Failed password for root from 94.231.120.189 port 52399 ssh2
...

Oct  7 10:09:29 MK-Soft-VM3 sshd[21354]: Failed password for root from 78.100.18.81 port 55622 ssh2
...

Received: from nnmtpndzrm.amazon.com (54.246.143.171) by DM6NAM11FT047.mail.protection.outlook.com (10.13.172.139) with Microsoft SMTP Server id 15.20.2327.20 via Frontend Transport; OriginalChecksum:8EC791B244F55C90FA146C8D7C5F81970EB1310DDD1EFBECF845D0B7ADEE5531;UpperCasedChecksum:E1CEFB47B3DD8D081BDE88A8B5578DD89CC9F819F1573AECA894093652A130C0;SizeAsReceived:471;Count:9 From: TOP CBD  Subject: Get CBD Today! Reply-To: Received: from 99awdo3linaIHhadchi44.com (172.31.22.253) by 99awdo3linaIHhadchi44.com id rA55LG0veEoO for ; Sun, 06 Oct 2019 23:09:39 +0200 (envelope-from  To: joycemarie1212@hotmail.com Message-ID: <9390a348-6bd5-4edd-a736-80e0d14074f4@DM6NAM11FT047.eop-nam11.prod.protection.outlook.com> Return-Path: bounce@69awdo3linatAhadchi44.com 
X-SID-PRA: FROM@09AWDO3LINAMZHADCHI44.COM X-SID-Result: NONE

Oct  7 10:16:52 vps01 sshd[14305]: Failed password for root from 39.109.127.36 port 37126 ssh2

Oct  7 05:18:49 ovpn sshd\[9344\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.85.116.242  user=root
Oct  7 05:18:51 ovpn sshd\[9344\]: Failed password for root from 177.85.116.242 port 30501 ssh2
Oct  7 05:35:52 ovpn sshd\[16733\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.85.116.242  user=root
Oct  7 05:35:54 ovpn sshd\[16733\]: Failed password for root from 177.85.116.242 port 33476 ssh2
Oct  7 05:47:14 ovpn sshd\[21368\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.85.116.242  user=root

Automatic report - Banned IP Access

Oct  6 21:12:32 php1 sshd\[18666\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.143.171.119  user=root
Oct  6 21:12:34 php1 sshd\[18666\]: Failed password for root from 121.143.171.119 port 50220 ssh2
Oct  6 21:17:14 php1 sshd\[19177\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.143.171.119  user=root
Oct  6 21:17:16 php1 sshd\[19177\]: Failed password for root from 121.143.171.119 port 33706 ssh2
Oct  6 21:22:07 php1 sshd\[20038\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.143.171.119  user=root

Oct  7 06:50:33 * sshd[4620]: Failed password for root from 106.12.198.21 port 60146 ssh2

Oct  7 10:47:35 itv-usvr-02 sshd[29874]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.87  user=root

Brute force attempt