Can we have SSHGuard as a free module. Almost all the server that I have that use aapanel are under aDDos attack by multiple ip addresses via ssh ports. They try almost every single port possible.
Sep 9 00:01:34 Cloud_Server_0 sshd[78997]: reverse mapping checking getaddrinfo for shooz4all.com [192.227.249.215] failed - POSSIBLE BREAK-IN ATTEMPT!
Sep 9 00:01:34 Cloud_Server_0 sshd[78997]: Invalid user admin from 192.227.249.215 port 53328
Sep 9 00:01:34 Cloud_Server_0 sshd[78997]: input_userauth_request: invalid user admin [preauth]
Sep 9 00:01:34 Cloud_Server_0 sshd[78997]: pam_unix(sshd:auth): check pass; user unknown
Sep 9 00:01:34 Cloud_Server_0 sshd[78997]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.227.249.215
Sep 9 00:01:36 Cloud_Server_0 sshd[78997]: Failed password for invalid user admin from 192.227.249.215 port 53328 ssh2
Sep 9 00:01:36 Cloud_Server_0 sshd[78997]: Received disconnect from 192.227.249.215 port 53328:11: Bye Bye [preauth]
Sep 9 00:01:36 Cloud_Server_0 sshd[78997]: Disconnected from 192.227.249.215 port 53328 [preauth]
Sep 9 00:01:55 Cloud_Server_0 sshd[79018]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.143.73.86 user=root
Sep 9 00:01:55 Cloud_Server_0 sshd[79018]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 9 00:01:57 Cloud_Server_0 sshd[79018]: Failed password for root from 103.143.73.86 port 53746 ssh2
Sep 9 00:01:57 Cloud_Server_0 sshd[79018]: Received disconnect from 103.143.73.86 port 53746:11: Bye Bye [preauth]
Sep 9 00:01:57 Cloud_Server_0 sshd[79018]: Disconnected from 103.143.73.86 port 53746 [preauth]
Sep 9 00:02:39 Cloud_Server_0 sshd[79066]: Invalid user zhangxin from 103.143.73.86 port 40426
Sep 9 00:02:39 Cloud_Server_0 sshd[79066]: input_userauth_request: invalid user zhangxin [preauth]
Sep 9 00:02:39 Cloud_Server_0 sshd[79066]: pam_unix(sshd:auth): check pass; user unknown
Sep 9 00:02:39 Cloud_Server_0 sshd[79066]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.143.73.86
Sep 9 00:02:41 Cloud_Server_0 sshd[79066]: Failed password for invalid user zhangxin from 103.143.73.86 port 40426 ssh2
Sep 9 00:02:41 Cloud_Server_0 sshd[79066]: Received disconnect from 103.143.73.86 port 40426:11: Bye Bye [preauth]
Sep 9 00:02:41 Cloud_Server_0 sshd[79066]: Disconnected from 103.143.73.86 port 40426 [preauth]
Sep 9 00:03:23 Cloud_Server_0 sshd[79115]: Invalid user husein from 103.143.73.86 port 55318
Sep 9 00:03:23 Cloud_Server_0 sshd[79115]: input_userauth_request: invalid user husein [preauth]
Sep 9 00:03:23 Cloud_Server_0 sshd[79115]: pam_unix(sshd:auth): check pass; user unknown
Sep 9 00:03:23 Cloud_Server_0 sshd[79115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.143.73.86
Sep 9 00:03:25 Cloud_Server_0 sshd[79115]: Failed password for invalid user husein from 103.143.73.86 port 55318 ssh2
Sep 9 00:03:25 Cloud_Server_0 sshd[79115]: Received disconnect from 103.143.73.86 port 55318:11: Bye Bye [preauth]
Sep 9 00:03:25 Cloud_Server_0 sshd[79115]: Disconnected from 103.143.73.86 port 55318 [preauth]
Sep 9 00:04:06 Cloud_Server_0 sshd[79189]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.126.228.70 user=root
Sep 9 00:04:06 Cloud_Server_0 sshd[79189]: pam_succeed_if(sshd:auth): requirement "uid >= 1000" not met by user "root"
Sep 9 00:04:08 Cloud_Server_0 sshd[79189]: Failed password for root from 144.126.228.70 port 45024 ssh2
Sep 9 00:04:08 Cloud_Server_0 sshd[79189]: Connection closed by 144.126.228.70 port 45024 [preauth]
