This is what a Brute Force SSH Attack looks like

Scroll all the way down for article/post

By webmaster

Jul 12 18:16:44 digitalocean shutdown[18576]: power-down by root: 
Jul 12 18:16:44 digitalocean shutdown[18579]: power-down by root: 
Jul 12 18:16:45 digitalocean sshd[686]: Received signal 15; terminating.
Aug  3 06:02:07 freebsd-s-1vcpu-1gb-sfo2-01 sshd[933]: Server listening on :: port 22.
Aug  3 06:02:07 freebsd-s-1vcpu-1gb-sfo2-01 sshd[933]: Server listening on 0.0.0.0 port 22.
Aug  3 06:02:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1019]: Invalid user edgar from 206.81.17.64 port 59518
Aug  3 06:02:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1019]: Failed unknown for invalid user edgar from 206.81.17.64 port 59518 ssh2
Aug  3 06:02:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1019]: user NOUSER login class  [preauth]
Aug  3 06:02:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1019]: Received disconnect from 206.81.17.64 port 59518:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:02:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1019]: Disconnected from invalid user edgar 206.81.17.64 port 59518 [preauth]
Aug  3 06:02:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1026]: Invalid user ellen from 206.81.17.64 port 48688
Aug  3 06:02:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1026]: Failed unknown for invalid user ellen from 206.81.17.64 port 48688 ssh2
Aug  3 06:02:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1026]: user NOUSER login class  [preauth]
Aug  3 06:02:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1026]: Received disconnect from 206.81.17.64 port 48688:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:02:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1026]: Disconnected from invalid user ellen 206.81.17.64 port 48688 [preauth]
Aug  3 06:03:28 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1100]: Invalid user emil from 206.81.17.64 port 37914
Aug  3 06:03:28 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1100]: Failed unknown for invalid user emil from 206.81.17.64 port 37914 ssh2
Aug  3 06:03:28 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1100]: user NOUSER login class  [preauth]
Aug  3 06:03:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1100]: Received disconnect from 206.81.17.64 port 37914:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:03:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1100]: Disconnected from invalid user emil 206.81.17.64 port 37914 [preauth]
Aug  3 06:04:06 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1102]: Invalid user enzo from 206.81.17.64 port 55472
Aug  3 06:04:06 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1102]: Failed unknown for invalid user enzo from 206.81.17.64 port 55472 ssh2
Aug  3 06:04:06 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1102]: user NOUSER login class  [preauth]
Aug  3 06:04:06 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1102]: Received disconnect from 206.81.17.64 port 55472:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:04:06 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1102]: Disconnected from invalid user enzo 206.81.17.64 port 55472 [preauth]
Aug  3 06:04:43 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1104]: Invalid user fabien from 206.81.17.64 port 44698
Aug  3 06:04:43 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1104]: Failed unknown for invalid user fabien from 206.81.17.64 port 44698 ssh2
Aug  3 06:04:43 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1104]: user NOUSER login class  [preauth]
Aug  3 06:04:43 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1104]: Received disconnect from 206.81.17.64 port 44698:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:04:43 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1104]: Disconnected from invalid user fabien 206.81.17.64 port 44698 [preauth]
Aug  3 06:05:19 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1108]: Invalid user felix from 206.81.17.64 port 33896
Aug  3 06:05:19 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1108]: Failed unknown for invalid user felix from 206.81.17.64 port 33896 ssh2
Aug  3 06:05:19 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1108]: user NOUSER login class  [preauth]
Aug  3 06:05:19 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1108]: Received disconnect from 206.81.17.64 port 33896:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:05:19 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1108]: Disconnected from invalid user felix 206.81.17.64 port 33896 [preauth]
Aug  3 06:05:50 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1110]: Invalid user tester from 193.144.61.81 port 57466
Aug  3 06:05:50 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1110]: Failed unknown for invalid user tester from 193.144.61.81 port 57466 ssh2
Aug  3 06:05:50 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1110]: user NOUSER login class  [preauth]
Aug  3 06:05:51 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1110]: Received disconnect from 193.144.61.81 port 57466:11: Bye Bye [preauth]
Aug  3 06:05:51 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1110]: Disconnected from invalid user tester 193.144.61.81 port 57466 [preauth]
Aug  3 06:05:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1112]: Invalid user fery from 206.81.17.64 port 51408
Aug  3 06:05:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1112]: Failed unknown for invalid user fery from 206.81.17.64 port 51408 ssh2
Aug  3 06:05:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1112]: user NOUSER login class  [preauth]
Aug  3 06:05:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1112]: Received disconnect from 206.81.17.64 port 51408:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:05:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1112]: Disconnected from invalid user fery 206.81.17.64 port 51408 [preauth]
Aug  3 06:06:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1115]: Invalid user francis from 206.81.17.64 port 40638
Aug  3 06:06:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1115]: Failed unknown for invalid user francis from 206.81.17.64 port 40638 ssh2
Aug  3 06:06:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1115]: user NOUSER login class  [preauth]
Aug  3 06:06:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1115]: Received disconnect from 206.81.17.64 port 40638:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:06:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1115]: Disconnected from invalid user francis 206.81.17.64 port 40638 [preauth]
Aug  3 06:07:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1119]: Invalid user gary from 206.81.17.64 port 58234
Aug  3 06:07:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1119]: Failed unknown for invalid user gary from 206.81.17.64 port 58234 ssh2
Aug  3 06:07:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1119]: user NOUSER login class  [preauth]
Aug  3 06:07:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1119]: Received disconnect from 206.81.17.64 port 58234:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:07:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1119]: Disconnected from invalid user gary 206.81.17.64 port 58234 [preauth]
Aug  3 06:07:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1121]: Invalid user harry from 206.81.17.64 port 47340
Aug  3 06:07:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1121]: Failed unknown for invalid user harry from 206.81.17.64 port 47340 ssh2
Aug  3 06:07:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1121]: user NOUSER login class  [preauth]
Aug  3 06:07:55 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1121]: Received disconnect from 206.81.17.64 port 47340:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:07:55 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1121]: Disconnected from invalid user harry 206.81.17.64 port 47340 [preauth]
Aug  3 06:08:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1123]: Invalid user henry from 206.81.17.64 port 36554
Aug  3 06:08:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1123]: Failed unknown for invalid user henry from 206.81.17.64 port 36554 ssh2
Aug  3 06:08:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1123]: user NOUSER login class  [preauth]
Aug  3 06:08:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1123]: Received disconnect from 206.81.17.64 port 36554:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:08:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1123]: Disconnected from invalid user henry 206.81.17.64 port 36554 [preauth]
Aug  3 06:09:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1125]: Invalid user lynda from 206.81.17.64 port 54044
Aug  3 06:09:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1125]: Failed unknown for invalid user lynda from 206.81.17.64 port 54044 ssh2
Aug  3 06:09:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1125]: user NOUSER login class  [preauth]
Aug  3 06:09:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1125]: Received disconnect from 206.81.17.64 port 54044:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:09:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1125]: Disconnected from invalid user lynda 206.81.17.64 port 54044 [preauth]
Aug  3 06:09:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1127]: Invalid user ian from 206.81.17.64 port 43280
Aug  3 06:09:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1127]: Failed unknown for invalid user ian from 206.81.17.64 port 43280 ssh2
Aug  3 06:09:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1127]: user NOUSER login class  [preauth]
Aug  3 06:09:48 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1127]: Received disconnect from 206.81.17.64 port 43280:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:09:48 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1127]: Disconnected from invalid user ian 206.81.17.64 port 43280 [preauth]
Aug  3 06:10:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1131]: Invalid user ismail from 206.81.17.64 port 60628
Aug  3 06:10:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1131]: Failed unknown for invalid user ismail from 206.81.17.64 port 60628 ssh2
Aug  3 06:10:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1131]: user NOUSER login class  [preauth]
Aug  3 06:10:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1131]: Received disconnect from 206.81.17.64 port 60628:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:10:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1131]: Disconnected from invalid user ismail 206.81.17.64 port 60628 [preauth]
Aug  3 06:10:59 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1133]: Invalid user jack from 206.81.17.64 port 49980
Aug  3 06:10:59 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1133]: Failed unknown for invalid user jack from 206.81.17.64 port 49980 ssh2
Aug  3 06:10:59 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1133]: user NOUSER login class  [preauth]
Aug  3 06:10:59 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1133]: Received disconnect from 206.81.17.64 port 49980:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:10:59 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1133]: Disconnected from invalid user jack 206.81.17.64 port 49980 [preauth]
Aug  3 06:11:34 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1139]: Invalid user jaxson from 206.81.17.64 port 39208
Aug  3 06:11:34 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1139]: Failed unknown for invalid user jaxson from 206.81.17.64 port 39208 ssh2
Aug  3 06:11:34 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1139]: user NOUSER login class  [preauth]
Aug  3 06:11:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1139]: Received disconnect from 206.81.17.64 port 39208:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:11:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1139]: Disconnected from invalid user jaxson 206.81.17.64 port 39208 [preauth]
Aug  3 06:12:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1141]: Invalid user jean from 206.81.17.64 port 56642
Aug  3 06:12:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1141]: Failed unknown for invalid user jean from 206.81.17.64 port 56642 ssh2
Aug  3 06:12:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1141]: user NOUSER login class  [preauth]
Aug  3 06:12:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1141]: Received disconnect from 206.81.17.64 port 56642:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:12:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1141]: Disconnected from invalid user jean 206.81.17.64 port 56642 [preauth]
Aug  3 06:12:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1144]: Invalid user jeff from 206.81.17.64 port 45910
Aug  3 06:12:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1144]: Failed unknown for invalid user jeff from 206.81.17.64 port 45910 ssh2
Aug  3 06:12:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1144]: user NOUSER login class  [preauth]
Aug  3 06:12:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1144]: Received disconnect from 206.81.17.64 port 45910:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:12:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1144]: Disconnected from invalid user jeff 206.81.17.64 port 45910 [preauth]
Aug  3 06:13:19 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1146]: reverse mapping checking getaddrinfo for 50-38-52-15.csby.or.frontiernet.net [50.38.52.15] failed.
Aug  3 06:13:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1148]: Invalid user jeremiah from 206.81.17.64 port 35146
Aug  3 06:13:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1148]: Failed unknown for invalid user jeremiah from 206.81.17.64 port 35146 ssh2
Aug  3 06:13:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1148]: user NOUSER login class  [preauth]
Aug  3 06:13:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1148]: Received disconnect from 206.81.17.64 port 35146:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:13:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1148]: Disconnected from invalid user jeremiah 206.81.17.64 port 35146 [preauth]
Aug  3 06:13:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1146]: Invalid user ftpuser from 50.38.52.15 port 51376
Aug  3 06:13:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1146]: Failed unknown for invalid user ftpuser from 50.38.52.15 port 51376 ssh2
Aug  3 06:13:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1146]: user NOUSER login class  [preauth]
Aug  3 06:13:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1146]: Received disconnect from 50.38.52.15 port 51376:11: Bye Bye [preauth]
Aug  3 06:13:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1146]: Disconnected from invalid user ftpuser 50.38.52.15 port 51376 [preauth]
Aug  3 06:13:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1150]: Invalid user jesse from 206.81.17.64 port 52616
Aug  3 06:13:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1150]: Failed unknown for invalid user jesse from 206.81.17.64 port 52616 ssh2
Aug  3 06:13:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1150]: user NOUSER login class  [preauth]
Aug  3 06:13:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1150]: Received disconnect from 206.81.17.64 port 52616:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:13:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1150]: Disconnected from invalid user jesse 206.81.17.64 port 52616 [preauth]
Aug  3 06:14:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1152]: Invalid user jessie from 206.81.17.64 port 41854
Aug  3 06:14:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1152]: Failed unknown for invalid user jessie from 206.81.17.64 port 41854 ssh2
Aug  3 06:14:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1152]: user NOUSER login class  [preauth]
Aug  3 06:14:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1152]: Received disconnect from 206.81.17.64 port 41854:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:14:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1152]: Disconnected from invalid user jessie 206.81.17.64 port 41854 [preauth]
Aug  3 06:15:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1156]: Invalid user jatten from 206.81.17.64 port 59340
Aug  3 06:15:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1156]: Failed unknown for invalid user jatten from 206.81.17.64 port 59340 ssh2
Aug  3 06:15:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1156]: user NOUSER login class  [preauth]
Aug  3 06:15:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1156]: Received disconnect from 206.81.17.64 port 59340:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:15:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1156]: Disconnected from invalid user jatten 206.81.17.64 port 59340 [preauth]
Aug  3 06:15:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: Invalid user admin from 180.68.44.97 port 43665
Aug  3 06:15:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: Failed unknown for invalid user admin from 180.68.44.97 port 43665 ssh2
Aug  3 06:15:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: user NOUSER login class  [preauth]
Aug  3 06:15:34 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: Failed unknown for invalid user admin from 180.68.44.97 port 43665 ssh2
Aug  3 06:15:34 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: user NOUSER login class  [preauth]
Aug  3 06:15:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: Failed unknown for invalid user admin from 180.68.44.97 port 43665 ssh2
Aug  3 06:15:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: user NOUSER login class  [preauth]
Aug  3 06:15:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: Failed unknown for invalid user admin from 180.68.44.97 port 43665 ssh2
Aug  3 06:15:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: user NOUSER login class  [preauth]
Aug  3 06:15:39 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: Failed unknown for invalid user admin from 180.68.44.97 port 43665 ssh2
Aug  3 06:15:39 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: user NOUSER login class  [preauth]
Aug  3 06:15:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: Failed unknown for invalid user admin from 180.68.44.97 port 43665 ssh2
Aug  3 06:15:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: user NOUSER login class  [preauth]
Aug  3 06:15:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: error: maximum authentication attempts exceeded for invalid user admin from 180.68.44.97 port 43665 ssh2 [preauth]
Aug  3 06:15:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1158]: Disconnecting invalid user admin 180.68.44.97 port 43665: Too many authentication failures [preauth]
Aug  3 06:15:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1160]: Invalid user jetty from 206.81.17.64 port 48552
Aug  3 06:15:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1160]: Failed unknown for invalid user jetty from 206.81.17.64 port 48552 ssh2
Aug  3 06:15:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1160]: user NOUSER login class  [preauth]
Aug  3 06:15:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1160]: Received disconnect from 206.81.17.64 port 48552:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:15:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1160]: Disconnected from invalid user jetty 206.81.17.64 port 48552 [preauth]
Aug  3 06:16:17 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1162]: reverse mapping checking getaddrinfo for mx11.kencraftinc.com [142.147.99.13] failed.
Aug  3 06:16:17 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1162]: Invalid user ioana from 142.147.99.13 port 33686
Aug  3 06:16:17 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1162]: Failed unknown for invalid user ioana from 142.147.99.13 port 33686 ssh2
Aug  3 06:16:17 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1162]: user NOUSER login class  [preauth]
Aug  3 06:16:17 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1162]: Received disconnect from 142.147.99.13 port 33686:11: Bye Bye [preauth]
Aug  3 06:16:17 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1162]: Disconnected from invalid user ioana 142.147.99.13 port 33686 [preauth]
Aug  3 06:16:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1164]: Invalid user jim from 206.81.17.64 port 37716
Aug  3 06:16:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1164]: Failed unknown for invalid user jim from 206.81.17.64 port 37716 ssh2
Aug  3 06:16:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1164]: user NOUSER login class  [preauth]
Aug  3 06:16:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1164]: Received disconnect from 206.81.17.64 port 37716:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:16:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1164]: Disconnected from invalid user jim 206.81.17.64 port 37716 [preauth]
Aug  3 06:17:00 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1167]: Invalid user jimmy from 206.81.17.64 port 55252
Aug  3 06:17:00 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1167]: Failed unknown for invalid user jimmy from 206.81.17.64 port 55252 ssh2
Aug  3 06:17:00 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1167]: user NOUSER login class  [preauth]
Aug  3 06:17:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1167]: Received disconnect from 206.81.17.64 port 55252:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:17:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1167]: Disconnected from invalid user jimmy 206.81.17.64 port 55252 [preauth]
Aug  3 06:17:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1169]: Invalid user joe from 206.81.17.64 port 44476
Aug  3 06:17:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1169]: Failed unknown for invalid user joe from 206.81.17.64 port 44476 ssh2
Aug  3 06:17:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1169]: user NOUSER login class  [preauth]
Aug  3 06:17:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1169]: Received disconnect from 206.81.17.64 port 44476:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:17:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1169]: Disconnected from invalid user joe 206.81.17.64 port 44476 [preauth]
Aug  3 06:18:12 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1171]: Invalid user john from 206.81.17.64 port 33654
Aug  3 06:18:12 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1171]: Failed unknown for invalid user john from 206.81.17.64 port 33654 ssh2
Aug  3 06:18:12 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1171]: user NOUSER login class  [preauth]
Aug  3 06:18:12 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1171]: Received disconnect from 206.81.17.64 port 33654:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:18:12 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1171]: Disconnected from invalid user john 206.81.17.64 port 33654 [preauth]
Aug  3 06:18:49 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1173]: Invalid user jonah from 206.81.17.64 port 51058
Aug  3 06:18:49 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1173]: Failed unknown for invalid user jonah from 206.81.17.64 port 51058 ssh2
Aug  3 06:18:49 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1173]: user NOUSER login class  [preauth]
Aug  3 06:18:49 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1173]: Received disconnect from 206.81.17.64 port 51058:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:18:49 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1173]: Disconnected from invalid user jonah 206.81.17.64 port 51058 [preauth]
Aug  3 06:19:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1175]: Invalid user julian from 206.81.17.64 port 40428
Aug  3 06:19:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1175]: Failed unknown for invalid user julian from 206.81.17.64 port 40428 ssh2
Aug  3 06:19:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1175]: user NOUSER login class  [preauth]
Aug  3 06:19:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1175]: Received disconnect from 206.81.17.64 port 40428:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:19:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1175]: Disconnected from invalid user julian 206.81.17.64 port 40428 [preauth]
Aug  3 06:19:43 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: Invalid user jenny from 185.220.101.0 port 40791
Aug  3 06:19:43 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: Failed unknown for invalid user jenny from 185.220.101.0 port 40791 ssh2
Aug  3 06:19:43 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: user NOUSER login class  [preauth]
Aug  3 06:19:43 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: Failed unknown for invalid user jenny from 185.220.101.0 port 40791 ssh2
Aug  3 06:19:43 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: user NOUSER login class  [preauth]
Aug  3 06:19:44 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: Failed unknown for invalid user jenny from 185.220.101.0 port 40791 ssh2
Aug  3 06:19:44 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: user NOUSER login class  [preauth]
Aug  3 06:19:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: Failed unknown for invalid user jenny from 185.220.101.0 port 40791 ssh2
Aug  3 06:19:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: user NOUSER login class  [preauth]
Aug  3 06:19:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: Failed unknown for invalid user jenny from 185.220.101.0 port 40791 ssh2
Aug  3 06:19:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: user NOUSER login class  [preauth]
Aug  3 06:19:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: Failed unknown for invalid user jenny from 185.220.101.0 port 40791 ssh2
Aug  3 06:19:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: user NOUSER login class  [preauth]
Aug  3 06:19:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: Failed unknown for invalid user jenny from 185.220.101.0 port 40791 ssh2
Aug  3 06:19:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: user NOUSER login class  [preauth]
Aug  3 06:19:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: Postponed keyboard-interactive for invalid user jenny from 185.220.101.0 port 40791 ssh2 [preauth]
Aug  3 06:19:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: error: PAM: Authentication error for illegal user jenny from 185.220.101.0
Aug  3 06:19:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: Failed keyboard-interactive/pam for invalid user jenny from 185.220.101.0 port 40791 ssh2
Aug  3 06:19:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: error: maximum authentication attempts exceeded for invalid user jenny from 185.220.101.0 port 40791 ssh2 [preauth]
Aug  3 06:19:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1177]: Disconnecting invalid user jenny 185.220.101.0 port 40791: Too many authentication failures [preauth]
Aug  3 06:20:05 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: Invalid user jenny from 185.220.101.0 port 46857
Aug  3 06:20:05 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: Failed unknown for invalid user jenny from 185.220.101.0 port 46857 ssh2
Aug  3 06:20:05 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: user NOUSER login class  [preauth]
Aug  3 06:20:06 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: Failed unknown for invalid user jenny from 185.220.101.0 port 46857 ssh2
Aug  3 06:20:06 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: user NOUSER login class  [preauth]
Aug  3 06:20:06 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: Failed unknown for invalid user jenny from 185.220.101.0 port 46857 ssh2
Aug  3 06:20:06 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: user NOUSER login class  [preauth]
Aug  3 06:20:07 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: Failed unknown for invalid user jenny from 185.220.101.0 port 46857 ssh2
Aug  3 06:20:07 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: user NOUSER login class  [preauth]
Aug  3 06:20:07 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: Failed unknown for invalid user jenny from 185.220.101.0 port 46857 ssh2
Aug  3 06:20:07 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: user NOUSER login class  [preauth]
Aug  3 06:20:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: Failed unknown for invalid user jenny from 185.220.101.0 port 46857 ssh2
Aug  3 06:20:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: user NOUSER login class  [preauth]
Aug  3 06:20:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1184]: Invalid user juliana from 206.81.17.64 port 57896
Aug  3 06:20:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1184]: Failed unknown for invalid user juliana from 206.81.17.64 port 57896 ssh2
Aug  3 06:20:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1184]: user NOUSER login class  [preauth]
Aug  3 06:20:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: Failed unknown for invalid user jenny from 185.220.101.0 port 46857 ssh2
Aug  3 06:20:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: user NOUSER login class  [preauth]
Aug  3 06:20:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: Postponed keyboard-interactive for invalid user jenny from 185.220.101.0 port 46857 ssh2 [preauth]
Aug  3 06:20:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1184]: Received disconnect from 206.81.17.64 port 57896:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:20:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1184]: Disconnected from invalid user juliana 206.81.17.64 port 57896 [preauth]
Aug  3 06:20:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1182]: Connection closed by invalid user jenny 185.220.101.0 port 46857 [preauth]
Aug  3 06:20:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1187]: user root login class  [preauth]
Aug  3 06:20:24 freebsd-s-1vcpu-1gb-sfo2-01 syslogd: last message repeated 2 times
Aug  3 06:20:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1187]: Failed unknown for root from 185.220.101.0 port 34099 ssh2
Aug  3 06:20:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1187]: user root login class  [preauth]
Aug  3 06:20:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1187]: Accepted publickey for root from 185.220.101.0 port 34099 ssh2: RSA SHA256:av1lvndZWmkLf5jDJUWTKbeDzTS/vyjXTUSkDWjGbEo
Aug  3 06:20:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1192]: Invalid user julie from 206.81.17.64 port 47140
Aug  3 06:20:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1192]: Failed unknown for invalid user julie from 206.81.17.64 port 47140 ssh2
Aug  3 06:20:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1192]: user NOUSER login class  [preauth]
Aug  3 06:20:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1192]: Received disconnect from 206.81.17.64 port 47140:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:20:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1192]: Disconnected from invalid user julie 206.81.17.64 port 47140 [preauth]
Aug  3 06:21:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1187]: Received disconnect from 185.220.101.0 port 34099:11: disconnected by user
Aug  3 06:21:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1187]: Disconnected from user root 185.220.101.0 port 34099
Aug  3 06:21:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1194]: Invalid user rebecca from 206.81.17.64 port 36360
Aug  3 06:21:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1194]: Failed unknown for invalid user rebecca from 206.81.17.64 port 36360 ssh2
Aug  3 06:21:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1194]: user NOUSER login class  [preauth]
Aug  3 06:21:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1194]: Received disconnect from 206.81.17.64 port 36360:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:21:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1194]: Disconnected from invalid user rebecca 206.81.17.64 port 36360 [preauth]
Aug  3 06:21:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1196]: user root login class  [preauth]
Aug  3 06:21:34 freebsd-s-1vcpu-1gb-sfo2-01 syslogd: last message repeated 2 times
Aug  3 06:21:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1196]: Failed unknown for root from 185.220.101.0 port 40523 ssh2
Aug  3 06:21:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1196]: user root login class  [preauth]
Aug  3 06:21:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1196]: Accepted publickey for root from 185.220.101.0 port 40523 ssh2: RSA SHA256:av1lvndZWmkLf5jDJUWTKbeDzTS/vyjXTUSkDWjGbEo
Aug  3 06:21:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1196]: Received disconnect from 185.220.101.0 port 40523:11: disconnected by user
Aug  3 06:21:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1196]: Disconnected from user root 185.220.101.0 port 40523
Aug  3 06:22:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1206]: Invalid user shane from 206.81.17.64 port 53826
Aug  3 06:22:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1206]: Failed unknown for invalid user shane from 206.81.17.64 port 53826 ssh2
Aug  3 06:22:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1206]: user NOUSER login class  [preauth]
Aug  3 06:22:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1206]: Received disconnect from 206.81.17.64 port 53826:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:22:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1206]: Disconnected from invalid user shane 206.81.17.64 port 53826 [preauth]
Aug  3 06:22:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1208]: user root login class  [preauth]
Aug  3 06:22:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1208]: Received disconnect from 51.68.227.49 port 45394:11: Bye Bye [preauth]
Aug  3 06:22:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1208]: Disconnected from authenticating user root 51.68.227.49 port 45394 [preauth]
Aug  3 06:22:39 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1210]: Invalid user jay from 206.81.17.64 port 43070
Aug  3 06:22:39 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1210]: Failed unknown for invalid user jay from 206.81.17.64 port 43070 ssh2
Aug  3 06:22:39 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1210]: user NOUSER login class  [preauth]
Aug  3 06:22:39 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1210]: Received disconnect from 206.81.17.64 port 43070:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:22:39 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1210]: Disconnected from invalid user jay 206.81.17.64 port 43070 [preauth]
Aug  3 06:23:13 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1215]: Invalid user karl from 206.81.17.64 port 60482
Aug  3 06:23:13 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1215]: Failed unknown for invalid user karl from 206.81.17.64 port 60482 ssh2
Aug  3 06:23:13 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1215]: user NOUSER login class  [preauth]
Aug  3 06:23:14 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1215]: Received disconnect from 206.81.17.64 port 60482:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:23:14 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1215]: Disconnected from invalid user karl 206.81.17.64 port 60482 [preauth]
Aug  3 06:23:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1217]: user root login class  [preauth]
Aug  3 06:23:15 freebsd-s-1vcpu-1gb-sfo2-01 syslogd: last message repeated 1 times
Aug  3 06:23:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1217]: Connection closed by authenticating user root 185.220.101.0 port 39713 [preauth]
Aug  3 06:23:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1219]: user root login class  [preauth]
Aug  3 06:23:22 freebsd-s-1vcpu-1gb-sfo2-01 syslogd: last message repeated 2 times
Aug  3 06:23:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1219]: Failed unknown for root from 185.220.101.0 port 35022 ssh2
Aug  3 06:23:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1219]: user root login class  [preauth]
Aug  3 06:23:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1219]: Accepted publickey for root from 185.220.101.0 port 35022 ssh2: RSA SHA256:av1lvndZWmkLf5jDJUWTKbeDzTS/vyjXTUSkDWjGbEo
Aug  3 06:23:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1219]: Received disconnect from 185.220.101.0 port 35022:11: disconnected by user
Aug  3 06:23:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1219]: Disconnected from user root 185.220.101.0 port 35022
Aug  3 06:23:50 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1227]: Invalid user kafka from 206.81.17.64 port 49824
Aug  3 06:23:50 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1227]: Failed unknown for invalid user kafka from 206.81.17.64 port 49824 ssh2
Aug  3 06:23:50 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1227]: user NOUSER login class  [preauth]
Aug  3 06:23:50 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1227]: Received disconnect from 206.81.17.64 port 49824:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:23:50 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1227]: Disconnected from invalid user kafka 206.81.17.64 port 49824 [preauth]
Aug  3 06:24:26 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1229]: Invalid user kang from 206.81.17.64 port 38942
Aug  3 06:24:26 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1229]: Failed unknown for invalid user kang from 206.81.17.64 port 38942 ssh2
Aug  3 06:24:26 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1229]: user NOUSER login class  [preauth]
Aug  3 06:24:26 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1229]: Received disconnect from 206.81.17.64 port 38942:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:24:26 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1229]: Disconnected from invalid user kang 206.81.17.64 port 38942 [preauth]
Aug  3 06:25:02 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1233]: Invalid user keith from 206.81.17.64 port 56472
Aug  3 06:25:02 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1233]: Failed unknown for invalid user keith from 206.81.17.64 port 56472 ssh2
Aug  3 06:25:02 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1233]: user NOUSER login class  [preauth]
Aug  3 06:25:02 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1233]: Received disconnect from 206.81.17.64 port 56472:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:25:02 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1233]: Disconnected from invalid user keith 206.81.17.64 port 56472 [preauth]
Aug  3 06:25:03 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1235]: user root login class  [preauth]
Aug  3 06:25:03 freebsd-s-1vcpu-1gb-sfo2-01 syslogd: last message repeated 1 times
Aug  3 06:25:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1245]: Invalid user ken from 206.81.17.64 port 45708
Aug  3 06:25:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1245]: Failed unknown for invalid user ken from 206.81.17.64 port 45708 ssh2
Aug  3 06:25:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1245]: user NOUSER login class  [preauth]
Aug  3 06:25:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1245]: Received disconnect from 206.81.17.64 port 45708:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:25:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1245]: Disconnected from invalid user ken 206.81.17.64 port 45708 [preauth]
Aug  3 06:26:03 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1247]: Received disconnect from 218.92.0.205 port 58021:11:  [preauth]
Aug  3 06:26:03 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1247]: Disconnected from 218.92.0.205 port 58021 [preauth]
Aug  3 06:26:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1249]: Invalid user keiv from 206.81.17.64 port 34914
Aug  3 06:26:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1249]: Failed unknown for invalid user keiv from 206.81.17.64 port 34914 ssh2
Aug  3 06:26:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1249]: user NOUSER login class  [preauth]
Aug  3 06:26:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1249]: Received disconnect from 206.81.17.64 port 34914:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:26:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1249]: Disconnected from invalid user keiv 206.81.17.64 port 34914 [preauth]
Aug  3 06:26:55 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1251]: Invalid user kirk from 206.81.17.64 port 52406
Aug  3 06:26:55 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1251]: Failed unknown for invalid user kirk from 206.81.17.64 port 52406 ssh2
Aug  3 06:26:55 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1251]: user NOUSER login class  [preauth]
Aug  3 06:26:55 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1251]: Received disconnect from 206.81.17.64 port 52406:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:26:55 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1251]: Disconnected from invalid user kirk 206.81.17.64 port 52406 [preauth]
Aug  3 06:27:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1253]: Invalid user laraht from 206.81.17.64 port 41636
Aug  3 06:27:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1253]: Failed unknown for invalid user laraht from 206.81.17.64 port 41636 ssh2
Aug  3 06:27:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1253]: user NOUSER login class  [preauth]
Aug  3 06:27:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1253]: Received disconnect from 206.81.17.64 port 41636:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:27:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1253]: Disconnected from invalid user laraht 206.81.17.64 port 41636 [preauth]
Aug  3 06:28:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1255]: Invalid user kimi from 206.81.17.64 port 59104
Aug  3 06:28:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1255]: Failed unknown for invalid user kimi from 206.81.17.64 port 59104 ssh2
Aug  3 06:28:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1255]: user NOUSER login class  [preauth]
Aug  3 06:28:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1255]: Received disconnect from 206.81.17.64 port 59104:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:28:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1255]: Disconnected from invalid user kimi 206.81.17.64 port 59104 [preauth]
Aug  3 06:28:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1257]: Invalid user kuat from 206.81.17.64 port 48336
Aug  3 06:28:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1257]: Failed unknown for invalid user kuat from 206.81.17.64 port 48336 ssh2
Aug  3 06:28:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1257]: user NOUSER login class  [preauth]
Aug  3 06:28:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1257]: Received disconnect from 206.81.17.64 port 48336:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:28:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1257]: Disconnected from invalid user kuat 206.81.17.64 port 48336 [preauth]
Aug  3 06:29:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1267]: Invalid user larry from 206.81.17.64 port 37526
Aug  3 06:29:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1267]: Failed unknown for invalid user larry from 206.81.17.64 port 37526 ssh2
Aug  3 06:29:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1267]: user NOUSER login class  [preauth]
Aug  3 06:29:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1267]: Received disconnect from 206.81.17.64 port 37526:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:29:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1267]: Disconnected from invalid user larry 206.81.17.64 port 37526 [preauth]
Aug  3 06:29:43 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1269]: Received disconnect from 153.36.236.35 port 52484:11:  [preauth]
Aug  3 06:29:43 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1269]: Disconnected from 153.36.236.35 port 52484 [preauth]
Aug  3 06:29:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1273]: Invalid user lee from 206.81.17.64 port 55048
Aug  3 06:29:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1273]: Failed unknown for invalid user lee from 206.81.17.64 port 55048 ssh2
Aug  3 06:29:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1273]: user NOUSER login class  [preauth]
Aug  3 06:29:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1273]: Received disconnect from 206.81.17.64 port 55048:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:29:59 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1273]: Disconnected from invalid user lee 206.81.17.64 port 55048 [preauth]
Aug  3 06:30:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1277]: Invalid user laurent from 206.81.17.64 port 44286
Aug  3 06:30:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1277]: Failed unknown for invalid user laurent from 206.81.17.64 port 44286 ssh2
Aug  3 06:30:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1277]: user NOUSER login class  [preauth]
Aug  3 06:30:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1277]: Received disconnect from 206.81.17.64 port 44286:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:30:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1277]: Disconnected from invalid user laurent 206.81.17.64 port 44286 [preauth]
Aug  3 06:31:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1279]: Invalid user lisa from 206.81.17.64 port 33526
Aug  3 06:31:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1279]: Failed unknown for invalid user lisa from 206.81.17.64 port 33526 ssh2
Aug  3 06:31:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1279]: user NOUSER login class  [preauth]
Aug  3 06:31:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1279]: Received disconnect from 206.81.17.64 port 33526:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:31:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1279]: Disconnected from invalid user lisa 206.81.17.64 port 33526 [preauth]
Aug  3 06:31:50 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1281]: Invalid user maggie from 206.81.17.64 port 50988
Aug  3 06:31:50 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1281]: Failed unknown for invalid user maggie from 206.81.17.64 port 50988 ssh2
Aug  3 06:31:50 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1281]: user NOUSER login class  [preauth]
Aug  3 06:31:50 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1281]: Received disconnect from 206.81.17.64 port 50988:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:31:50 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1281]: Disconnected from invalid user maggie 206.81.17.64 port 50988 [preauth]
Aug  3 06:32:30 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1285]: Invalid user magic from 206.81.17.64 port 40224
Aug  3 06:32:30 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1285]: Failed unknown for invalid user magic from 206.81.17.64 port 40224 ssh2
Aug  3 06:32:30 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1285]: user NOUSER login class  [preauth]
Aug  3 06:32:30 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1285]: Received disconnect from 206.81.17.64 port 40224:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:32:30 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1285]: Disconnected from invalid user magic 206.81.17.64 port 40224 [preauth]
Aug  3 06:33:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1294]: Invalid user mail from 206.81.17.64 port 57692
Aug  3 06:33:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1294]: Failed unknown for invalid user mail from 206.81.17.64 port 57692 ssh2
Aug  3 06:33:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1294]: user NOUSER login class  [preauth]
Aug  3 06:33:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1294]: Received disconnect from 206.81.17.64 port 57692:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:33:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1294]: Disconnected from invalid user mail 206.81.17.64 port 57692 [preauth]
Aug  3 06:33:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1296]: Invalid user maria from 206.81.17.64 port 46930
Aug  3 06:33:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1296]: Failed unknown for invalid user maria from 206.81.17.64 port 46930 ssh2
Aug  3 06:33:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1296]: user NOUSER login class  [preauth]
Aug  3 06:33:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1296]: Received disconnect from 206.81.17.64 port 46930:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:33:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1296]: Disconnected from invalid user maria 206.81.17.64 port 46930 [preauth]
Aug  3 06:34:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1298]: Invalid user marry from 206.81.17.64 port 36174
Aug  3 06:34:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1298]: Failed unknown for invalid user marry from 206.81.17.64 port 36174 ssh2
Aug  3 06:34:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1298]: user NOUSER login class  [preauth]
Aug  3 06:34:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1298]: Received disconnect from 206.81.17.64 port 36174:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:34:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1298]: Disconnected from invalid user marry 206.81.17.64 port 36174 [preauth]
Aug  3 06:35:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1302]: Invalid user mashby from 206.81.17.64 port 53626
Aug  3 06:35:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1302]: Failed unknown for invalid user mashby from 206.81.17.64 port 53626 ssh2
Aug  3 06:35:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1302]: user NOUSER login class  [preauth]
Aug  3 06:35:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1302]: Received disconnect from 206.81.17.64 port 53626:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:35:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1302]: Disconnected from invalid user mashby 206.81.17.64 port 53626 [preauth]
Aug  3 06:35:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1304]: Invalid user mary from 206.81.17.64 port 42860
Aug  3 06:35:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1304]: Failed unknown for invalid user mary from 206.81.17.64 port 42860 ssh2
Aug  3 06:35:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1304]: user NOUSER login class  [preauth]
Aug  3 06:35:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1304]: Received disconnect from 206.81.17.64 port 42860:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:35:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1304]: Disconnected from invalid user mary 206.81.17.64 port 42860 [preauth]
Aug  3 06:36:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1306]: Invalid user mark from 206.81.17.64 port 60282
Aug  3 06:36:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1306]: Failed unknown for invalid user mark from 206.81.17.64 port 60282 ssh2
Aug  3 06:36:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1306]: user NOUSER login class  [preauth]
Aug  3 06:36:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1306]: Received disconnect from 206.81.17.64 port 60282:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:36:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1306]: Disconnected from invalid user mark 206.81.17.64 port 60282 [preauth]
Aug  3 06:37:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1308]: Invalid user marketto from 206.81.17.64 port 49578
Aug  3 06:37:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1308]: Failed unknown for invalid user marketto from 206.81.17.64 port 49578 ssh2
Aug  3 06:37:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1308]: user NOUSER login class  [preauth]
Aug  3 06:37:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1308]: Received disconnect from 206.81.17.64 port 49578:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:37:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1308]: Disconnected from invalid user marketto 206.81.17.64 port 49578 [preauth]
Aug  3 06:37:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1310]: Invalid user calzado from 206.81.17.64 port 38798
Aug  3 06:37:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1310]: Failed unknown for invalid user calzado from 206.81.17.64 port 38798 ssh2
Aug  3 06:37:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1310]: user NOUSER login class  [preauth]
Aug  3 06:37:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1310]: Received disconnect from 206.81.17.64 port 38798:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:37:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1310]: Disconnected from invalid user calzado 206.81.17.64 port 38798 [preauth]
Aug  3 06:38:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1312]: Invalid user cele from 206.81.17.64 port 56276
Aug  3 06:38:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1312]: Failed unknown for invalid user cele from 206.81.17.64 port 56276 ssh2
Aug  3 06:38:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1312]: user NOUSER login class  [preauth]
Aug  3 06:38:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1312]: Received disconnect from 206.81.17.64 port 56276:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:38:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1312]: Disconnected from invalid user cele 206.81.17.64 port 56276 [preauth]
Aug  3 06:38:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1314]: Invalid user marvin from 206.81.17.64 port 45498
Aug  3 06:38:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1314]: Failed unknown for invalid user marvin from 206.81.17.64 port 45498 ssh2
Aug  3 06:38:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1314]: user NOUSER login class  [preauth]
Aug  3 06:38:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1314]: Received disconnect from 206.81.17.64 port 45498:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:38:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1314]: Disconnected from invalid user marvin 206.81.17.64 port 45498 [preauth]
Aug  3 06:39:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1316]: Invalid user matt from 206.81.17.64 port 34734
Aug  3 06:39:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1316]: Failed unknown for invalid user matt from 206.81.17.64 port 34734 ssh2
Aug  3 06:39:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1316]: user NOUSER login class  [preauth]
Aug  3 06:39:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1316]: Received disconnect from 206.81.17.64 port 34734:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:39:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1316]: Disconnected from invalid user matt 206.81.17.64 port 34734 [preauth]
Aug  3 06:40:04 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1320]: Invalid user mosquitto from 206.81.17.64 port 52204
Aug  3 06:40:04 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1320]: Failed unknown for invalid user mosquitto from 206.81.17.64 port 52204 ssh2
Aug  3 06:40:04 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1320]: user NOUSER login class  [preauth]
Aug  3 06:40:04 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1320]: Received disconnect from 206.81.17.64 port 52204:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:40:04 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1320]: Disconnected from invalid user mosquitto 206.81.17.64 port 52204 [preauth]
Aug  3 06:40:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1322]: Invalid user pat from 206.81.17.64 port 41442
Aug  3 06:40:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1322]: Failed unknown for invalid user pat from 206.81.17.64 port 41442 ssh2
Aug  3 06:40:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1322]: user NOUSER login class  [preauth]
Aug  3 06:40:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1322]: Received disconnect from 206.81.17.64 port 41442:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:40:41 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1322]: Disconnected from invalid user pat 206.81.17.64 port 41442 [preauth]
Aug  3 06:41:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1324]: Invalid user oleta from 206.81.17.64 port 58880
Aug  3 06:41:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1324]: Failed unknown for invalid user oleta from 206.81.17.64 port 58880 ssh2
Aug  3 06:41:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1324]: user NOUSER login class  [preauth]
Aug  3 06:41:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1324]: Received disconnect from 206.81.17.64 port 58880:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:41:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1324]: Disconnected from invalid user oleta 206.81.17.64 port 58880 [preauth]
Aug  3 06:41:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1326]: Invalid user monica from 206.81.17.64 port 48140
Aug  3 06:41:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1326]: Failed unknown for invalid user monica from 206.81.17.64 port 48140 ssh2
Aug  3 06:41:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1326]: user NOUSER login class  [preauth]
Aug  3 06:41:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1326]: Received disconnect from 206.81.17.64 port 48140:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:41:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1326]: Disconnected from invalid user monica 206.81.17.64 port 48140 [preauth]
Aug  3 06:42:27 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1328]: Invalid user natalia from 206.81.17.64 port 37374
Aug  3 06:42:27 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1328]: Failed unknown for invalid user natalia from 206.81.17.64 port 37374 ssh2
Aug  3 06:42:27 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1328]: user NOUSER login class  [preauth]
Aug  3 06:42:27 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1328]: Received disconnect from 206.81.17.64 port 37374:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:42:27 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1328]: Disconnected from invalid user natalia 206.81.17.64 port 37374 [preauth]
Aug  3 06:43:04 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1330]: Invalid user nathan from 206.81.17.64 port 54842
Aug  3 06:43:04 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1330]: Failed unknown for invalid user nathan from 206.81.17.64 port 54842 ssh2
Aug  3 06:43:04 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1330]: user NOUSER login class  [preauth]
Aug  3 06:43:05 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1330]: Received disconnect from 206.81.17.64 port 54842:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:43:05 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1330]: Disconnected from invalid user nathan 206.81.17.64 port 54842 [preauth]
Aug  3 06:43:42 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1332]: Invalid user nicole from 206.81.17.64 port 44078
Aug  3 06:43:42 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1332]: Failed unknown for invalid user nicole from 206.81.17.64 port 44078 ssh2
Aug  3 06:43:42 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1332]: user NOUSER login class  [preauth]
Aug  3 06:43:42 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1332]: Received disconnect from 206.81.17.64 port 44078:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:43:42 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1332]: Disconnected from invalid user nicole 206.81.17.64 port 44078 [preauth]
Aug  3 06:44:20 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1341]: Invalid user odoo from 206.81.17.64 port 33310
Aug  3 06:44:20 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1341]: Failed unknown for invalid user odoo from 206.81.17.64 port 33310 ssh2
Aug  3 06:44:20 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1341]: user NOUSER login class  [preauth]
Aug  3 06:44:20 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1341]: Received disconnect from 206.81.17.64 port 33310:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:44:20 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1341]: Disconnected from invalid user odoo 206.81.17.64 port 33310 [preauth]
Aug  3 06:44:59 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1343]: Invalid user paul from 206.81.17.64 port 50778
Aug  3 06:44:59 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1343]: Failed unknown for invalid user paul from 206.81.17.64 port 50778 ssh2
Aug  3 06:44:59 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1343]: user NOUSER login class  [preauth]
Aug  3 06:44:59 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1343]: Received disconnect from 206.81.17.64 port 50778:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:44:59 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1343]: Disconnected from invalid user paul 206.81.17.64 port 50778 [preauth]
Aug  3 06:45:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1347]: Invalid user pete from 206.81.17.64 port 40012
Aug  3 06:45:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1347]: Failed unknown for invalid user pete from 206.81.17.64 port 40012 ssh2
Aug  3 06:45:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1347]: user NOUSER login class  [preauth]
Aug  3 06:45:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1347]: Received disconnect from 206.81.17.64 port 40012:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:45:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1347]: Disconnected from invalid user pete 206.81.17.64 port 40012 [preauth]
Aug  3 06:46:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1349]: Invalid user peter from 206.81.17.64 port 57692
Aug  3 06:46:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1349]: Failed unknown for invalid user peter from 206.81.17.64 port 57692 ssh2
Aug  3 06:46:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1349]: user NOUSER login class  [preauth]
Aug  3 06:46:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1349]: Received disconnect from 206.81.17.64 port 57692:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:46:15 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1349]: Disconnected from invalid user peter 206.81.17.64 port 57692 [preauth]
Aug  3 06:46:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1351]: Invalid user philip from 206.81.17.64 port 46718
Aug  3 06:46:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1351]: Failed unknown for invalid user philip from 206.81.17.64 port 46718 ssh2
Aug  3 06:46:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1351]: user NOUSER login class  [preauth]
Aug  3 06:46:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1351]: Received disconnect from 206.81.17.64 port 46718:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:46:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1351]: Disconnected from invalid user philip 206.81.17.64 port 46718 [preauth]
Aug  3 06:47:34 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1353]: Invalid user phil from 206.81.17.64 port 35948
Aug  3 06:47:34 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1353]: Failed unknown for invalid user phil from 206.81.17.64 port 35948 ssh2
Aug  3 06:47:34 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1353]: user NOUSER login class  [preauth]
Aug  3 06:47:34 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1353]: Received disconnect from 206.81.17.64 port 35948:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:47:34 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1353]: Disconnected from invalid user phil 206.81.17.64 port 35948 [preauth]
Aug  3 06:48:14 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1355]: Invalid user phoenix from 206.81.17.64 port 53416
Aug  3 06:48:14 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1355]: Failed unknown for invalid user phoenix from 206.81.17.64 port 53416 ssh2
Aug  3 06:48:14 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1355]: user NOUSER login class  [preauth]
Aug  3 06:48:14 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1355]: Received disconnect from 206.81.17.64 port 53416:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:48:14 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1355]: Disconnected from invalid user phoenix 206.81.17.64 port 53416 [preauth]
Aug  3 06:48:53 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1357]: Invalid user rachel from 206.81.17.64 port 42640
Aug  3 06:48:53 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1357]: Failed unknown for invalid user rachel from 206.81.17.64 port 42640 ssh2
Aug  3 06:48:53 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1357]: user NOUSER login class  [preauth]
Aug  3 06:48:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1357]: Received disconnect from 206.81.17.64 port 42640:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:48:54 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1357]: Disconnected from invalid user rachel 206.81.17.64 port 42640 [preauth]
Aug  3 06:49:31 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1359]: Invalid user puebra from 206.81.17.64 port 60114
Aug  3 06:49:31 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1359]: Failed unknown for invalid user puebra from 206.81.17.64 port 60114 ssh2
Aug  3 06:49:31 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1359]: user NOUSER login class  [preauth]
Aug  3 06:49:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1359]: Received disconnect from 206.81.17.64 port 60114:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:49:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1359]: Disconnected from invalid user puebra 206.81.17.64 port 60114 [preauth]
Aug  3 06:50:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1363]: Invalid user piper from 206.81.17.64 port 49266
Aug  3 06:50:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1363]: Failed unknown for invalid user piper from 206.81.17.64 port 49266 ssh2
Aug  3 06:50:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1363]: user NOUSER login class  [preauth]
Aug  3 06:50:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1363]: Received disconnect from 206.81.17.64 port 49266:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:50:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1363]: Disconnected from invalid user piper 206.81.17.64 port 49266 [preauth]
Aug  3 06:50:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1365]: Invalid user denny from 206.81.17.64 port 38590
Aug  3 06:50:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1365]: Failed unknown for invalid user denny from 206.81.17.64 port 38590 ssh2
Aug  3 06:50:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1365]: user NOUSER login class  [preauth]
Aug  3 06:50:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1365]: Received disconnect from 206.81.17.64 port 38590:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:50:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1365]: Disconnected from invalid user denny 206.81.17.64 port 38590 [preauth]
Aug  3 06:51:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1367]: Invalid user yatri from 206.81.17.64 port 56052
Aug  3 06:51:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1367]: Failed unknown for invalid user yatri from 206.81.17.64 port 56052 ssh2
Aug  3 06:51:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1367]: user NOUSER login class  [preauth]
Aug  3 06:51:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1367]: Received disconnect from 206.81.17.64 port 56052:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:51:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1367]: Disconnected from invalid user yatri 206.81.17.64 port 56052 [preauth]
Aug  3 06:51:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1369]: Invalid user db_shv from 206.81.17.64 port 45438
Aug  3 06:51:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1369]: Failed unknown for invalid user db_shv from 206.81.17.64 port 45438 ssh2
Aug  3 06:51:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1369]: user NOUSER login class  [preauth]
Aug  3 06:51:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1369]: Received disconnect from 206.81.17.64 port 45438:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:51:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1369]: Disconnected from invalid user db_shv 206.81.17.64 port 45438 [preauth]
Aug  3 06:52:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1371]: Invalid user jiayuanyang from 206.81.17.64 port 34480
Aug  3 06:52:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1371]: Failed unknown for invalid user jiayuanyang from 206.81.17.64 port 34480 ssh2
Aug  3 06:52:32 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1371]: user NOUSER login class  [preauth]
Aug  3 06:52:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1371]: Received disconnect from 206.81.17.64 port 34480:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:52:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1371]: Disconnected from invalid user jiayuanyang 206.81.17.64 port 34480 [preauth]
Aug  3 06:53:09 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1373]: Invalid user ari from 206.81.17.64 port 51982
Aug  3 06:53:09 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1373]: Failed unknown for invalid user ari from 206.81.17.64 port 51982 ssh2
Aug  3 06:53:09 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1373]: user NOUSER login class  [preauth]
Aug  3 06:53:09 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1373]: Received disconnect from 206.81.17.64 port 51982:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:53:09 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1373]: Disconnected from invalid user ari 206.81.17.64 port 51982 [preauth]
Aug  3 06:53:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1375]: Invalid user rafli from 206.81.17.64 port 41222
Aug  3 06:53:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1375]: Failed unknown for invalid user rafli from 206.81.17.64 port 41222 ssh2
Aug  3 06:53:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1375]: user NOUSER login class  [preauth]
Aug  3 06:53:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1375]: Received disconnect from 206.81.17.64 port 41222:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:53:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1375]: Disconnected from invalid user rafli 206.81.17.64 port 41222 [preauth]
Aug  3 06:54:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1377]: Invalid user ralph from 206.81.17.64 port 58698
Aug  3 06:54:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1377]: Failed unknown for invalid user ralph from 206.81.17.64 port 58698 ssh2
Aug  3 06:54:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1377]: user NOUSER login class  [preauth]
Aug  3 06:54:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1377]: Received disconnect from 206.81.17.64 port 58698:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:54:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1377]: Disconnected from invalid user ralph 206.81.17.64 port 58698 [preauth]
Aug  3 06:54:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1379]: Invalid user remy from 206.81.17.64 port 47994
Aug  3 06:54:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1379]: Failed unknown for invalid user remy from 206.81.17.64 port 47994 ssh2
Aug  3 06:54:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1379]: user NOUSER login class  [preauth]
Aug  3 06:54:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1379]: Received disconnect from 206.81.17.64 port 47994:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:54:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1379]: Disconnected from invalid user remy 206.81.17.64 port 47994 [preauth]
Aug  3 06:55:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1391]: Invalid user robyn from 206.81.17.64 port 37166
Aug  3 06:55:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1391]: Failed unknown for invalid user robyn from 206.81.17.64 port 37166 ssh2
Aug  3 06:55:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1391]: user NOUSER login class  [preauth]
Aug  3 06:55:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1391]: Received disconnect from 206.81.17.64 port 37166:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:55:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1391]: Disconnected from invalid user robyn 206.81.17.64 port 37166 [preauth]
Aug  3 06:56:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1393]: Invalid user rob from 206.81.17.64 port 54636
Aug  3 06:56:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1393]: Failed unknown for invalid user rob from 206.81.17.64 port 54636 ssh2
Aug  3 06:56:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1393]: user NOUSER login class  [preauth]
Aug  3 06:56:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1393]: Received disconnect from 206.81.17.64 port 54636:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:56:11 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1393]: Disconnected from invalid user rob 206.81.17.64 port 54636 [preauth]
Aug  3 06:56:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1395]: Invalid user resin from 206.81.17.64 port 43870
Aug  3 06:56:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1395]: Failed unknown for invalid user resin from 206.81.17.64 port 43870 ssh2
Aug  3 06:56:47 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1395]: user NOUSER login class  [preauth]
Aug  3 06:56:48 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1395]: Received disconnect from 206.81.17.64 port 43870:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:56:48 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1395]: Disconnected from invalid user resin 206.81.17.64 port 43870 [preauth]
Aug  3 06:57:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1397]: Invalid user rian from 206.81.17.64 port 33096
Aug  3 06:57:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1397]: Failed unknown for invalid user rian from 206.81.17.64 port 33096 ssh2
Aug  3 06:57:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1397]: user NOUSER login class  [preauth]
Aug  3 06:57:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1397]: Received disconnect from 206.81.17.64 port 33096:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:57:24 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1397]: Disconnected from invalid user rian 206.81.17.64 port 33096 [preauth]
Aug  3 06:58:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1399]: Invalid user richard from 206.81.17.64 port 50732
Aug  3 06:58:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1399]: Failed unknown for invalid user richard from 206.81.17.64 port 50732 ssh2
Aug  3 06:58:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1399]: user NOUSER login class  [preauth]
Aug  3 06:58:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1399]: Received disconnect from 206.81.17.64 port 50732:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:58:01 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1399]: Disconnected from invalid user richard 206.81.17.64 port 50732 [preauth]
Aug  3 06:58:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1401]: Invalid user robi from 206.81.17.64 port 39790
Aug  3 06:58:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1401]: Failed unknown for invalid user robi from 206.81.17.64 port 39790 ssh2
Aug  3 06:58:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1401]: user NOUSER login class  [preauth]
Aug  3 06:58:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1401]: Received disconnect from 206.81.17.64 port 39790:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:58:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1401]: Disconnected from invalid user robi 206.81.17.64 port 39790 [preauth]
Aug  3 06:59:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1403]: Invalid user roland from 206.81.17.64 port 57264
Aug  3 06:59:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1403]: Failed unknown for invalid user roland from 206.81.17.64 port 57264 ssh2
Aug  3 06:59:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1403]: user NOUSER login class  [preauth]
Aug  3 06:59:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1403]: Received disconnect from 206.81.17.64 port 57264:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:59:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1403]: Disconnected from invalid user roland 206.81.17.64 port 57264 [preauth]
Aug  3 06:59:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1405]: Invalid user ronald from 206.81.17.64 port 46606
Aug  3 06:59:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1405]: Failed unknown for invalid user ronald from 206.81.17.64 port 46606 ssh2
Aug  3 06:59:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1405]: user NOUSER login class  [preauth]
Aug  3 06:59:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1405]: Received disconnect from 206.81.17.64 port 46606:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 06:59:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1405]: Disconnected from invalid user ronald 206.81.17.64 port 46606 [preauth]
Aug  3 07:00:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1420]: Invalid user sales from 206.81.17.64 port 35740
Aug  3 07:00:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1420]: Failed unknown for invalid user sales from 206.81.17.64 port 35740 ssh2
Aug  3 07:00:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1420]: user NOUSER login class  [preauth]
Aug  3 07:00:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1420]: Received disconnect from 206.81.17.64 port 35740:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:00:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1420]: Disconnected from invalid user sales 206.81.17.64 port 35740 [preauth]
Aug  3 07:01:19 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1422]: Invalid user sam from 206.81.17.64 port 53200
Aug  3 07:01:19 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1422]: Failed unknown for invalid user sam from 206.81.17.64 port 53200 ssh2
Aug  3 07:01:19 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1422]: user NOUSER login class  [preauth]
Aug  3 07:01:19 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1422]: Received disconnect from 206.81.17.64 port 53200:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:01:19 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1422]: Disconnected from invalid user sam 206.81.17.64 port 53200 [preauth]
Aug  3 07:01:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1424]: Invalid user sam from 206.81.17.64 port 42434
Aug  3 07:01:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1424]: Failed unknown for invalid user sam from 206.81.17.64 port 42434 ssh2
Aug  3 07:01:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1424]: user NOUSER login class  [preauth]
Aug  3 07:01:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1424]: Received disconnect from 206.81.17.64 port 42434:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:01:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1424]: Disconnected from invalid user sam 206.81.17.64 port 42434 [preauth]
Aug  3 07:02:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1428]: Invalid user samba from 206.81.17.64 port 59900
Aug  3 07:02:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1428]: Failed unknown for invalid user samba from 206.81.17.64 port 59900 ssh2
Aug  3 07:02:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1428]: user NOUSER login class  [preauth]
Aug  3 07:02:34 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1428]: Received disconnect from 206.81.17.64 port 59900:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:02:34 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1428]: Disconnected from invalid user samba 206.81.17.64 port 59900 [preauth]
Aug  3 07:03:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1430]: Invalid user samir from 206.81.17.64 port 49136
Aug  3 07:03:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1430]: Failed unknown for invalid user samir from 206.81.17.64 port 49136 ssh2
Aug  3 07:03:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1430]: user NOUSER login class  [preauth]
Aug  3 07:03:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1430]: Received disconnect from 206.81.17.64 port 49136:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:03:08 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1430]: Disconnected from invalid user samir 206.81.17.64 port 49136 [preauth]
Aug  3 07:03:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1432]: Invalid user sammy from 206.81.17.64 port 38396
Aug  3 07:03:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1432]: Failed unknown for invalid user sammy from 206.81.17.64 port 38396 ssh2
Aug  3 07:03:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1432]: user NOUSER login class  [preauth]
Aug  3 07:03:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1432]: Received disconnect from 206.81.17.64 port 38396:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:03:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1432]: Disconnected from invalid user sammy 206.81.17.64 port 38396 [preauth]
Aug  3 07:04:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1434]: Invalid user scarab from 206.81.17.64 port 55842
Aug  3 07:04:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1434]: Failed unknown for invalid user scarab from 206.81.17.64 port 55842 ssh2
Aug  3 07:04:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1434]: user NOUSER login class  [preauth]
Aug  3 07:04:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1434]: Received disconnect from 206.81.17.64 port 55842:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:04:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1434]: Disconnected from invalid user scarab 206.81.17.64 port 55842 [preauth]
Aug  3 07:04:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1436]: Invalid user sean from 206.81.17.64 port 45030
Aug  3 07:04:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1436]: Failed unknown for invalid user sean from 206.81.17.64 port 45030 ssh2
Aug  3 07:04:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1436]: user NOUSER login class  [preauth]
Aug  3 07:04:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1436]: Received disconnect from 206.81.17.64 port 45030:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:04:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1436]: Disconnected from invalid user sean 206.81.17.64 port 45030 [preauth]
Aug  3 07:05:06 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1440]: Connection closed by 107.170.18.163 port 32876 [preauth]
Aug  3 07:05:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1442]: Invalid user shaun from 206.81.17.64 port 34312
Aug  3 07:05:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1442]: Failed unknown for invalid user shaun from 206.81.17.64 port 34312 ssh2
Aug  3 07:05:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1442]: user NOUSER login class  [preauth]
Aug  3 07:05:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1442]: Received disconnect from 206.81.17.64 port 34312:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:05:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1442]: Disconnected from invalid user shaun 206.81.17.64 port 34312 [preauth]
Aug  3 07:06:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1445]: Invalid user sole from 206.81.17.64 port 51778
Aug  3 07:06:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1445]: Failed unknown for invalid user sole from 206.81.17.64 port 51778 ssh2
Aug  3 07:06:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1445]: user NOUSER login class  [preauth]
Aug  3 07:06:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1445]: Received disconnect from 206.81.17.64 port 51778:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:06:10 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1445]: Disconnected from invalid user sole 206.81.17.64 port 51778 [preauth]
Aug  3 07:06:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: Invalid user admin from 116.125.235.227 port 50917
Aug  3 07:06:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: Failed unknown for invalid user admin from 116.125.235.227 port 50917 ssh2
Aug  3 07:06:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: user NOUSER login class  [preauth]
Aug  3 07:06:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: Failed unknown for invalid user admin from 116.125.235.227 port 50917 ssh2
Aug  3 07:06:18 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: user NOUSER login class  [preauth]
Aug  3 07:06:19 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: Failed unknown for invalid user admin from 116.125.235.227 port 50917 ssh2
Aug  3 07:06:19 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: user NOUSER login class  [preauth]
Aug  3 07:06:20 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: Failed unknown for invalid user admin from 116.125.235.227 port 50917 ssh2
Aug  3 07:06:20 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: user NOUSER login class  [preauth]
Aug  3 07:06:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: Failed unknown for invalid user admin from 116.125.235.227 port 50917 ssh2
Aug  3 07:06:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: user NOUSER login class  [preauth]
Aug  3 07:06:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: Failed unknown for invalid user admin from 116.125.235.227 port 50917 ssh2
Aug  3 07:06:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: user NOUSER login class  [preauth]
Aug  3 07:06:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: error: maximum authentication attempts exceeded for invalid user admin from 116.125.235.227 port 50917 ssh2 [preauth]
Aug  3 07:06:23 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1444]: Disconnecting invalid user admin 116.125.235.227 port 50917: Too many authentication failures [preauth]
Aug  3 07:06:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1448]: Invalid user sol from 206.81.17.64 port 40940
Aug  3 07:06:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1448]: Failed unknown for invalid user sol from 206.81.17.64 port 40940 ssh2
Aug  3 07:06:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1448]: user NOUSER login class  [preauth]
Aug  3 07:06:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1448]: Received disconnect from 206.81.17.64 port 40940:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:06:46 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1448]: Disconnected from invalid user sol 206.81.17.64 port 40940 [preauth]
Aug  3 07:07:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1450]: Invalid user sonny from 206.81.17.64 port 58458
Aug  3 07:07:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1450]: Failed unknown for invalid user sonny from 206.81.17.64 port 58458 ssh2
Aug  3 07:07:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1450]: user NOUSER login class  [preauth]
Aug  3 07:07:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1450]: Received disconnect from 206.81.17.64 port 58458:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:07:22 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1450]: Disconnected from invalid user sonny 206.81.17.64 port 58458 [preauth]
Aug  3 07:07:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1452]: Invalid user stan from 206.81.17.64 port 47714
Aug  3 07:07:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1452]: Failed unknown for invalid user stan from 206.81.17.64 port 47714 ssh2
Aug  3 07:07:57 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1452]: user NOUSER login class  [preauth]
Aug  3 07:07:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1452]: Received disconnect from 206.81.17.64 port 47714:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:07:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1452]: Disconnected from invalid user stan 206.81.17.64 port 47714 [preauth]
Aug  3 07:08:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1454]: Invalid user steven from 206.81.17.64 port 36958
Aug  3 07:08:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1454]: Failed unknown for invalid user steven from 206.81.17.64 port 36958 ssh2
Aug  3 07:08:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1454]: user NOUSER login class  [preauth]
Aug  3 07:08:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1454]: Received disconnect from 206.81.17.64 port 36958:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:08:33 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1454]: Disconnected from invalid user steven 206.81.17.64 port 36958 [preauth]
Aug  3 07:09:09 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1456]: Invalid user steve from 206.81.17.64 port 54410
Aug  3 07:09:09 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1456]: Failed unknown for invalid user steve from 206.81.17.64 port 54410 ssh2
Aug  3 07:09:09 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1456]: user NOUSER login class  [preauth]
Aug  3 07:09:09 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1456]: Received disconnect from 206.81.17.64 port 54410:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:09:09 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1456]: Disconnected from invalid user steve 206.81.17.64 port 54410 [preauth]
Aug  3 07:09:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1458]: Invalid user sven from 206.81.17.64 port 43586
Aug  3 07:09:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1458]: Failed unknown for invalid user sven from 206.81.17.64 port 43586 ssh2
Aug  3 07:09:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1458]: user NOUSER login class  [preauth]
Aug  3 07:09:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1458]: Received disconnect from 206.81.17.64 port 43586:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:09:45 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1458]: Disconnected from invalid user sven 206.81.17.64 port 43586 [preauth]
Aug  3 07:10:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1462]: Invalid user sya from 206.81.17.64 port 32880
Aug  3 07:10:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1462]: Failed unknown for invalid user sya from 206.81.17.64 port 32880 ssh2
Aug  3 07:10:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1462]: user NOUSER login class  [preauth]
Aug  3 07:10:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1462]: Received disconnect from 206.81.17.64 port 32880:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:10:21 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1462]: Disconnected from invalid user sya 206.81.17.64 port 32880 [preauth]
Aug  3 07:10:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1464]: Invalid user tanja from 206.81.17.64 port 50348
Aug  3 07:10:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1464]: Failed unknown for invalid user tanja from 206.81.17.64 port 50348 ssh2
Aug  3 07:10:58 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1464]: user NOUSER login class  [preauth]
Aug  3 07:10:59 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1464]: Received disconnect from 206.81.17.64 port 50348:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:10:59 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1464]: Disconnected from invalid user tanja 206.81.17.64 port 50348 [preauth]
Aug  3 07:11:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1476]: Invalid user thomas from 206.81.17.64 port 39588
Aug  3 07:11:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1476]: Failed unknown for invalid user thomas from 206.81.17.64 port 39588 ssh2
Aug  3 07:11:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1476]: user NOUSER login class  [preauth]
Aug  3 07:11:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1476]: Received disconnect from 206.81.17.64 port 39588:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:11:37 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1476]: Disconnected from invalid user thomas 206.81.17.64 port 39588 [preauth]
Aug  3 07:12:17 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1478]: Invalid user tim from 206.81.17.64 port 57050
Aug  3 07:12:17 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1478]: Failed unknown for invalid user tim from 206.81.17.64 port 57050 ssh2
Aug  3 07:12:17 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1478]: user NOUSER login class  [preauth]
Aug  3 07:12:17 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1478]: Received disconnect from 206.81.17.64 port 57050:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:12:17 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1478]: Disconnected from invalid user tim 206.81.17.64 port 57050 [preauth]
Aug  3 07:12:56 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1480]: Invalid user tom from 206.81.17.64 port 46274
Aug  3 07:12:56 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1480]: Failed unknown for invalid user tom from 206.81.17.64 port 46274 ssh2
Aug  3 07:12:56 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1480]: user NOUSER login class  [preauth]
Aug  3 07:12:56 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1480]: Received disconnect from 206.81.17.64 port 46274:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:12:56 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1480]: Disconnected from invalid user tom 206.81.17.64 port 46274 [preauth]
Aug  3 07:13:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1482]: Invalid user den from 206.81.17.64 port 35506
Aug  3 07:13:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1482]: Failed unknown for invalid user den from 206.81.17.64 port 35506 ssh2
Aug  3 07:13:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1482]: user NOUSER login class  [preauth]
Aug  3 07:13:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1482]: Received disconnect from 206.81.17.64 port 35506:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:13:35 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1482]: Disconnected from invalid user den 206.81.17.64 port 35506 [preauth]
Aug  3 07:14:14 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1484]: Invalid user fatimac from 206.81.17.64 port 52988
Aug  3 07:14:14 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1484]: Failed unknown for invalid user fatimac from 206.81.17.64 port 52988 ssh2
Aug  3 07:14:14 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1484]: user NOUSER login class  [preauth]
Aug  3 07:14:14 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1484]: Received disconnect from 206.81.17.64 port 52988:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:14:14 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1484]: Disconnected from invalid user fatimac 206.81.17.64 port 52988 [preauth]
Aug  3 07:14:38 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1486]: reverse mapping checking getaddrinfo for zg-0301d-66.stretchoid.com [107.170.192.103] failed.
Aug  3 07:14:48 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1486]: Did not receive identification string from 107.170.192.103 port 34442
Aug  3 07:14:51 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1487]: Invalid user freyna from 206.81.17.64 port 42236
Aug  3 07:14:51 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1487]: Failed unknown for invalid user freyna from 206.81.17.64 port 42236 ssh2
Aug  3 07:14:51 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1487]: user NOUSER login class  [preauth]
Aug  3 07:14:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1487]: Received disconnect from 206.81.17.64 port 42236:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:14:52 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1487]: Disconnected from invalid user freyna 206.81.17.64 port 42236 [preauth]
Aug  3 07:15:27 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1491]: Invalid user jhesrhel from 206.81.17.64 port 59698
Aug  3 07:15:27 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1491]: Failed unknown for invalid user jhesrhel from 206.81.17.64 port 59698 ssh2
Aug  3 07:15:27 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1491]: user NOUSER login class  [preauth]
Aug  3 07:15:27 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1491]: Received disconnect from 206.81.17.64 port 59698:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:15:27 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1491]: Disconnected from invalid user jhesrhel 206.81.17.64 port 59698 [preauth]
Aug  3 07:16:03 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1493]: Invalid user jocelyn from 206.81.17.64 port 48928
Aug  3 07:16:03 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1493]: Failed unknown for invalid user jocelyn from 206.81.17.64 port 48928 ssh2
Aug  3 07:16:03 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1493]: user NOUSER login class  [preauth]
Aug  3 07:16:04 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1493]: Received disconnect from 206.81.17.64 port 48928:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:16:04 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1493]: Disconnected from invalid user jocelyn 206.81.17.64 port 48928 [preauth]
Aug  3 07:16:39 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1495]: Invalid user todd from 206.81.17.64 port 38158
Aug  3 07:16:39 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1495]: Failed unknown for invalid user todd from 206.81.17.64 port 38158 ssh2
Aug  3 07:16:39 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1495]: user NOUSER login class  [preauth]
Aug  3 07:16:39 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1495]: Received disconnect from 206.81.17.64 port 38158:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:16:39 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1495]: Disconnected from invalid user todd 206.81.17.64 port 38158 [preauth]
Aug  3 07:17:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1497]: Invalid user todds from 206.81.17.64 port 55628
Aug  3 07:17:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1497]: Failed unknown for invalid user todds from 206.81.17.64 port 55628 ssh2
Aug  3 07:17:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1497]: user NOUSER login class  [preauth]
Aug  3 07:17:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1497]: Received disconnect from 206.81.17.64 port 55628:11: Normal Shutdown, Thank you for playing [preauth]
Aug  3 07:17:16 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1497]: Disconnected from invalid user todds 206.81.17.64 port 55628 [preauth]
Aug  3 07:17:29 freebsd-s-1vcpu-1gb-sfo2-01 sshd[1499]: user root login class  [preauth]

Here's what's going on

I made a FreeBSD droplet (virtual machine) on DigitalOcean without connecting any firewall to it, waiting to see who tries to gain access. In less than a minute there were brute force attacks on my ssh server. These are not directed attacks at my server personally though, rather they are simple scripts which search the internet and try to find an open ssh port (aka skript-kiddies). The script is constantly trying to guess a user and to see if they have a bad or no password. If it can find an account to log into, it logs in, and installs malware. Or, it comes back later to install malware. Either way your getting malware. :) The malware can range from crypto minners, which use your processing power to mine cryptocurrency to mail servers which use your server or computer to spam emails

How to protect yourself

USE PUBLIC KEY AUTHENTICATION

One of the worst types of compromises is someone getting into your ssh server. Luckily though, SSH is one of the easiest servers to secure. Requiring a key to login to an SSH server is the best and easiest way to secure an ssh server. It can be almost downright impossible (nothing is impossible but...) for hackers to get into your server. As long as they don't have your private key and passphrase

Firewall

Most cloud providers have external firewalls you can limit connections by IPs with provided at no extra cost. If you only have a select amount of people at definite places, you can set up your firewall to only allow IP's from those places/people. IP addresses change though, so this one can be hard to maintain if you have a lot of people accessing your server. Ipv6 addresses change almost every time you reboot your computer! (At least for me).

Security through obscurity

Security through obscucrity IS NOT REAL SECURITY

These tips do not protect your server by themselves. All they really do is lower the frequency of attacks you may be getting. They're like hiding in plain sight kind of tactics

Changing ssh port from 22

Every man and their dog knows that SSH is on port 22 By changing the port you simply stop a lot (but not all) scripts from contacting your server. Most websites recommend that you do this, although there is one website I found that says there is some vulnerability in doing so. Basically, on POSIX/UNIX like systems every port above 1024 can be opened by non privelaged users. Therefore a malicious process can get your credentials by faking SSH on that port. It's definetly possible, but it's only possible if you have a malicious process running on your system before the attack happens. As a rule of thumb, if you allow all incomming connections to your ssh server, change the port, if you limit what IPs can connect, you don't have to.

Ipv6 only

This assumes that most scripts are running on ipv4. Right now, they are. In the future, everything will be ipv6, so it's not a method that will last.
One might think that with ipv6's 340 undecillion ip address combinations that sequentally scanning IP's will only turn up ssh servers once in a billion tries.
And yes that is true, it might even take a lifetime, but script kiddies can still get other ways to get viable IP addresses.

Creative Commons License
This work is licensed under a Creative Commons Attribution-ShareAlike 4.0 International License.