Today, the first, there were 4 when I found out. Later, I tried, everywhere, had to disable 25 IP addresses via a script, but now everything is slowed down to WEB and SSH ports. Was in total 200-300 attackers.
My own server was the same, via same IP addresses but instead of SSH, my router was DNS.
