port scan and connect, tcp 23 (telnet)

2019-10-08T00:53:19.4322331495-001 sshd\[39920\]: Failed password for invalid user Sigmal from 59.153.74.43 port 11855 ssh2
2019-10-08T01:05:09.3464391495-001 sshd\[40951\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.153.74.43  user=root
2019-10-08T01:05:11.2040671495-001 sshd\[40951\]: Failed password for root from 59.153.74.43 port 4638 ssh2
2019-10-08T01:09:12.0881331495-001 sshd\[41323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.153.74.43  user=root
2019-10-08T01:09:14.3064141495-001 sshd\[41323\]: Failed password for root from 59.153.74.43 port 4991 ssh2
2019-10-08T01:13:06.7492541495-001 sshd\[41531\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.153.74.43  user=root
...

Oct  8 03:54:05 www_kotimaassa_fi sshd[834]: Failed password for root from 173.82.154.74 port 51334 ssh2
...

Oct  8 12:04:07 webhost01 sshd[28540]: Failed password for root from 54.37.136.213 port 56914 ssh2
...

(sshd) Failed SSH login from 79.137.86.43 (43.ip-79-137-86.eu): 5 in the last 3600 secs

WordPress login Brute force / Web App Attack on client site.

Oct  8 06:36:44 SilenceServices sshd[15923]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.206.149
Oct  8 06:36:47 SilenceServices sshd[15923]: Failed password for invalid user Digital2017 from 51.254.206.149 port 49050 ssh2
Oct  8 06:40:26 SilenceServices sshd[16968]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.254.206.149

Oct  8 07:54:47 meumeu sshd[30559]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.116.121 
Oct  8 07:54:48 meumeu sshd[30559]: Failed password for invalid user Centos!@# from 152.136.116.121 port 57852 ssh2
Oct  8 08:00:21 meumeu sshd[31585]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.116.121 
...

Aug 23 20:14:52 dallas01 sshd[3952]: Failed password for root from 112.166.1.227 port 34820 ssh2
Aug 23 20:20:55 dallas01 sshd[5065]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.166.1.227
Aug 23 20:20:57 dallas01 sshd[5065]: Failed password for invalid user majordom1 from 112.166.1.227 port 50548 ssh2

Oct  8 06:07:03 mail postfix/smtpd\[29476\]: warning: unknown\[45.82.153.37\]: SASL PLAIN authentication failed: \
Oct  8 06:07:13 mail postfix/smtpd\[29623\]: warning: unknown\[45.82.153.37\]: SASL PLAIN authentication failed: \
Oct  8 06:44:37 mail postfix/smtpd\[32400\]: warning: unknown\[45.82.153.37\]: SASL PLAIN authentication failed: \
Oct  8 07:22:49 mail postfix/smtpd\[1503\]: warning: unknown\[45.82.153.37\]: SASL PLAIN authentication failed: \

Oct  8 07:18:02 legacy sshd[27892]: Failed password for root from 109.170.1.58 port 36108 ssh2
Oct  8 07:22:19 legacy sshd[28054]: Failed password for root from 109.170.1.58 port 48164 ssh2
...

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/151.16.222.120/ 
 IT - 1H : (61)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : IT 
 NAME ASN : ASN1267 
 
 IP : 151.16.222.120 
 
 CIDR : 151.16.0.0/16 
 
 PREFIX COUNT : 161 
 
 UNIQUE IP COUNT : 6032640 
 
 
 WYKRYTE ATAKI Z ASN1267 :  
  1H - 2 
  3H - 4 
  6H - 4 
 12H - 4 
 24H - 13 
 
 DateTime : 2019-10-08 05:57:32 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

2019-10-07T23:44:06.3418871495-001 sshd\[33850\]: Invalid user www@1234 from 129.28.62.75 port 35476
2019-10-07T23:44:06.3480291495-001 sshd\[33850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.62.75
2019-10-07T23:44:07.9350991495-001 sshd\[33850\]: Failed password for invalid user www@1234 from 129.28.62.75 port 35476 ssh2
2019-10-07T23:48:27.9120971495-001 sshd\[34252\]: Invalid user R00T from 129.28.62.75 port 41530
2019-10-07T23:48:27.9191281495-001 sshd\[34252\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.28.62.75
2019-10-07T23:48:30.3343841495-001 sshd\[34252\]: Failed password for invalid user R00T from 129.28.62.75 port 41530 ssh2
...

2019-10-08T05:59:53.666070shield sshd\[23495\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=abi-hosting.onsite.hosting.co.za  user=root
2019-10-08T05:59:56.033343shield sshd\[23495\]: Failed password for root from 196.35.41.86 port 59833 ssh2
2019-10-08T06:04:56.947790shield sshd\[24509\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=abi-hosting.onsite.hosting.co.za  user=root
2019-10-08T06:04:59.242652shield sshd\[24509\]: Failed password for root from 196.35.41.86 port 50969 ssh2
2019-10-08T06:09:52.110303shield sshd\[25269\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=abi-hosting.onsite.hosting.co.za  user=root

Oct  7 22:44:21 mailman postfix/smtpd[8979]: NOQUEUE: reject: RCPT from unknown[92.46.250.118]: 554 5.7.1 Service unavailable; Client host [92.46.250.118] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/92.46.250.118; from= to= proto=ESMTP helo=<[92.46.250.118]>
Oct  7 22:57:09 mailman postfix/smtpd[9088]: NOQUEUE: reject: RCPT from unknown[92.46.250.118]: 554 5.7.1 Service unavailable; Client host [92.46.250.118] blocked using sbl-xbl.spamhaus.org; https://www.spamhaus.org/query/ip/92.46.250.118; from= to= proto=ESMTP helo=<[92.46.250.118]>