Oct 27 07:35:21 SilenceServices sshd[22682]: Failed password for root from 5.39.79.48 port 48218 ssh2
Oct 27 07:39:32 SilenceServices sshd[23816]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=5.39.79.48
Oct 27 07:39:34 SilenceServices sshd[23816]: Failed password for invalid user vnc from 5.39.79.48 port 39277 ssh2

ssh bruteforce or scan
...

Oct 27 09:25:21 vtv3 sshd\[11138\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.235.16  user=root
Oct 27 09:25:23 vtv3 sshd\[11138\]: Failed password for root from 40.117.235.16 port 52698 ssh2
Oct 27 09:28:54 vtv3 sshd\[12526\]: Invalid user test from 40.117.235.16 port 37672
Oct 27 09:28:54 vtv3 sshd\[12526\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=40.117.235.16
Oct 27 09:28:57 vtv3 sshd\[12526\]: Failed password for invalid user test from 40.117.235.16 port 37672 ssh2

2019-10-27 05:20:20,852 fail2ban.actions: WARNING [ssh] Ban 86.101.56.141

Oct 27 09:11:04 ns postfix/smtpd[21052]: NOQUEUE: reject: RCPT from unknown[206.161.150.37]: 554 5.7.1 : Helo command rejected: Access denied; from= to=<*@*> proto=ESMTP helo=

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/183.89.243.195/ 
 
 TH - 1H : (21)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : TH 
 NAME ASN : ASN45758 
 
 IP : 183.89.243.195 
 
 CIDR : 183.89.0.0/16 
 
 PREFIX COUNT : 64 
 
 UNIQUE IP COUNT : 1069568 
 
 
 ATTACKS DETECTED ASN45758 :  
  1H - 1 
  3H - 3 
  6H - 3 
 12H - 6 
 24H - 6 
 
 DateTime : 2019-10-27 04:53:35 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

Oct 26 23:53:27 esmtp postfix/smtpd[10350]: lost connection after AUTH from unknown[218.4.246.76]
Oct 26 23:53:28 esmtp postfix/smtpd[10350]: lost connection after AUTH from unknown[218.4.246.76]
Oct 26 23:53:30 esmtp postfix/smtpd[10350]: lost connection after AUTH from unknown[218.4.246.76]
Oct 26 23:53:30 esmtp postfix/smtpd[10352]: lost connection after AUTH from unknown[218.4.246.76]
Oct 26 23:53:31 esmtp postfix/smtpd[10352]: lost connection after AUTH from unknown[218.4.246.76]

........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=218.4.246.76

2019-10-27T03:46:21.538264Z 7860389fafea New connection: 37.59.114.113:40476 (172.17.0.3:2222) [session: 7860389fafea]
2019-10-27T03:53:39.576051Z ef97cfd3ba3e New connection: 37.59.114.113:35464 (172.17.0.3:2222) [session: ef97cfd3ba3e]

10/27/2019-07:14:12.656720 185.175.93.105 Protocol: 6 ET DROP Dshield Block Listed Source group 1

2019-10-27T06:16:01.433136centos sshd\[29134\]: Invalid user mother from 185.13.78.80 port 56118
2019-10-27T06:16:01.788283centos sshd\[29134\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.13.78.80
2019-10-27T06:16:03.911115centos sshd\[29134\]: Failed password for invalid user mother from 185.13.78.80 port 56118 ssh2

(From tdorothy499@gmail.com) Hi there!

I'm a freelance web developer who specializes in the WordPress website platform, and I'm also well-versed with many other platforms and shopping carts as well. I'd like to know if you'd be interested in redesigning or rebuilding your website. 

I'd really like to help to make your website more beautiful and business efficient. I can make improvements your existing website or build you a new one from scratch that has all of the modern features and functionality. I assure you that all my work is accomplished by myself and is never outsourced. 

Do you have some free time in the next few days for a free consultation? I'll give you some ideas, get your feedback, and give you a proposal. Please let me know if this is something you're interested in. Talk soon!

Dorothy Taylor

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/190.42.182.2/ 
 
 US - 1H : (197)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : US 
 NAME ASN : ASN6147 
 
 IP : 190.42.182.2 
 
 CIDR : 190.42.180.0/22 
 
 PREFIX COUNT : 2296 
 
 UNIQUE IP COUNT : 1456128 
 
 
 ATTACKS DETECTED ASN6147 :  
  1H - 1 
  3H - 1 
  6H - 2 
 12H - 5 
 24H - 9 
 
 DateTime : 2019-10-27 04:54:13 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

Oct 27 05:21:40 localhost sshd\[112390\]: Invalid user zzidc!@\#194146 from 200.182.172.131 port 55450
Oct 27 05:21:40 localhost sshd\[112390\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.182.172.131
Oct 27 05:21:43 localhost sshd\[112390\]: Failed password for invalid user zzidc!@\#194146 from 200.182.172.131 port 55450 ssh2
Oct 27 05:26:24 localhost sshd\[112513\]: Invalid user hzhz from 200.182.172.131 port 36314
Oct 27 05:26:24 localhost sshd\[112513\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=200.182.172.131
...

Oct 26 20:22:14 php1 sshd\[24423\]: Invalid user mpweb from 222.171.82.169
Oct 26 20:22:14 php1 sshd\[24423\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.171.82.169
Oct 26 20:22:15 php1 sshd\[24423\]: Failed password for invalid user mpweb from 222.171.82.169 port 49338 ssh2
Oct 26 20:28:04 php1 sshd\[24930\]: Invalid user administrador from 222.171.82.169
Oct 26 20:28:04 php1 sshd\[24930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.171.82.169

Oct 27 05:16:45 xeon sshd[28187]: Failed password for root from 106.13.135.156 port 57334 ssh2