Nov  3 16:50:14 game-panel sshd[25112]: Failed password for root from 91.207.40.43 port 33542 ssh2
Nov  3 16:54:40 game-panel sshd[25219]: Failed password for root from 91.207.40.43 port 42682 ssh2

2019-11-03T17:35:25.764268abusebot-4.cloudsearch.cf sshd\[19224\]: Invalid user roto from 195.214.223.84 port 37556

Nov  3 19:53:13 sauna sshd[205925]: Failed password for root from 190.144.45.108 port 10804 ssh2
...

Nov  3 18:21:55 webserver postfix/smtpd\[8385\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  3 18:23:06 webserver postfix/smtpd\[5674\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  3 18:24:17 webserver postfix/smtpd\[8385\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  3 18:25:27 webserver postfix/smtpd\[8385\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Nov  3 18:26:38 webserver postfix/smtpd\[8385\]: warning: unknown\[46.38.144.17\]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
...

Lines containing failures of 62.234.156.221
Nov  2 04:38:42 shared04 sshd[14850]: Invalid user cp from 62.234.156.221 port 58364
Nov  2 04:38:42 shared04 sshd[14850]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.234.156.221
Nov  2 04:38:44 shared04 sshd[14850]: Failed password for invalid user cp from 62.234.156.221 port 58364 ssh2
Nov  2 04:38:44 shared04 sshd[14850]: Received disconnect from 62.234.156.221 port 58364:11: Bye Bye [preauth]
Nov  2 04:38:44 shared04 sshd[14850]: Disconnected from invalid user cp 62.234.156.221 port 58364 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=62.234.156.221

Nov  3 16:23:09 vps647732 sshd[2117]: Failed password for root from 123.30.236.149 port 37232 ssh2
...

\[2019-11-03 12:14:33\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.85.138:63255' - Wrong password
\[2019-11-03 12:14:33\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-03T12:14:33.563-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1080",SessionID="0x7fdf2c003608",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85.138/63255",Challenge="2dcd67a5",ReceivedChallenge="2dcd67a5",ReceivedHash="6bbb4b07016d6900e2686c72e2e753fb"
\[2019-11-03 12:15:33\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.85.138:57160' - Wrong password
\[2019-11-03 12:15:33\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-03T12:15:33.148-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="547",SessionID="0x7fdf2cabda78",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85.1

Nov  3 05:53:14 web9 sshd\[10650\]: Invalid user sy from 106.13.87.170
Nov  3 05:53:14 web9 sshd\[10650\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.87.170
Nov  3 05:53:16 web9 sshd\[10650\]: Failed password for invalid user sy from 106.13.87.170 port 48524 ssh2
Nov  3 05:59:32 web9 sshd\[11589\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.87.170  user=root
Nov  3 05:59:34 web9 sshd\[11589\]: Failed password for root from 106.13.87.170 port 53782 ssh2

detected by Fail2Ban

Nov  3 18:06:19 tor-proxy-02 sshd\[774\]: User root from 111.59.93.76 not allowed because not listed in AllowUsers
Nov  3 18:06:22 tor-proxy-02 sshd\[776\]: User root from 111.59.93.76 not allowed because not listed in AllowUsers
Nov  3 18:06:40 tor-proxy-02 sshd\[778\]: User root from 111.59.93.76 not allowed because not listed in AllowUsers
...

Nov  3 16:35:27 MK-Soft-Root1 sshd[7526]: Failed password for root from 5.39.92.187 port 46628 ssh2
...

2019-11-03T17:32:52.570924shield sshd\[31317\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.238.162.159  user=root
2019-11-03T17:32:54.598956shield sshd\[31317\]: Failed password for root from 103.238.162.159 port 43806 ssh2
2019-11-03T17:38:05.073885shield sshd\[342\]: Invalid user admin from 103.238.162.159 port 47944
2019-11-03T17:38:05.078486shield sshd\[342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.238.162.159
2019-11-03T17:38:06.740445shield sshd\[342\]: Failed password for invalid user admin from 103.238.162.159 port 47944 ssh2

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/198.105.244.19/ 
 
 US - 1H : (253)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : US 
 NAME ASN : ASN36029 
 
 IP : 198.105.244.19 
 
 CIDR : 198.105.244.0/24 
 
 PREFIX COUNT : 16 
 
 UNIQUE IP COUNT : 4096 
 
 
 ATTACKS DETECTED ASN36029 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-11-03 15:34:20 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

Nov  3 06:14:56 sachi sshd\[6616\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.201.157.119  user=root
Nov  3 06:14:59 sachi sshd\[6616\]: Failed password for root from 84.201.157.119 port 56052 ssh2
Nov  3 06:19:07 sachi sshd\[6927\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.201.157.119  user=root
Nov  3 06:19:10 sachi sshd\[6927\]: Failed password for root from 84.201.157.119 port 37850 ssh2
Nov  3 06:23:13 sachi sshd\[7260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=84.201.157.119  user=root

" "