Oct 21 03:37:54 firewall sshd[24397]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.32.153.15  user=root
Oct 21 03:37:57 firewall sshd[24397]: Failed password for root from 114.32.153.15 port 60794 ssh2
Oct 21 03:41:43 firewall sshd[24511]: Invalid user amelie from 114.32.153.15
...

Oct 20 23:16:18 hpm sshd\[20560\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.113  user=root
Oct 20 23:16:19 hpm sshd\[20560\]: Failed password for root from 49.88.112.113 port 13599 ssh2
Oct 20 23:16:46 hpm sshd\[20610\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.113  user=root
Oct 20 23:16:48 hpm sshd\[20610\]: Failed password for root from 49.88.112.113 port 32970 ssh2
Oct 20 23:17:17 hpm sshd\[20655\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.88.112.113  user=root

ssh brute force

Oct 21 05:43:05 bouncer sshd\[2451\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.238.70  user=root
Oct 21 05:43:07 bouncer sshd\[2451\]: Failed password for root from 180.76.238.70 port 58670 ssh2
Oct 21 05:47:45 bouncer sshd\[2469\]: Invalid user user from 180.76.238.70 port 38396
...

Oct 21 08:45:43 MK-Soft-VM5 sshd[22908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=132.232.2.184 
Oct 21 08:45:45 MK-Soft-VM5 sshd[22908]: Failed password for invalid user sunos from 132.232.2.184 port 64746 ssh2
...

Oct 21 03:49:03 TORMINT sshd\[5744\]: Invalid user 1234567 from 106.12.5.96
Oct 21 03:49:03 TORMINT sshd\[5744\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.5.96
Oct 21 03:49:04 TORMINT sshd\[5744\]: Failed password for invalid user 1234567 from 106.12.5.96 port 42548 ssh2
...

Unauthorised access (Oct 21) SRC=36.229.67.146 LEN=52 PREC=0x20 TTL=116 ID=25575 DF TCP DPT=445 WINDOW=8192 SYN

Oct 21 05:47:12 dedicated sshd[15604]: Invalid user surabaya1 from 41.76.209.14 port 56368

Invalid user oracle from 91.121.101.159 port 49842

(From edwardfleetwood1@gmail.com) Hello there!

I'm a freelance digital marketing specialist who provides SEO services that can improve your search rankings. The boost in your ranking on Google search results will result in getting more unique visits from potential clients on your website, thus making the search engines like Google consider you as a more trusted website. This eventually leads to better credibility and more sales. 

If you're interested, I'll give you a free consultation to inform you about where your site currently stands, what can be done and what to expect once the site has been optimized. Please let me know what you think. I hope to speak with you soon. 

Best regards,
Edward Fleetwood

Oct 21 06:47:35 www4 sshd\[9653\]: Invalid user temp from 114.242.169.37
Oct 21 06:47:35 www4 sshd\[9653\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.242.169.37
Oct 21 06:47:37 www4 sshd\[9653\]: Failed password for invalid user temp from 114.242.169.37 port 40612 ssh2
...

\[2019-10-21 04:53:25\] NOTICE\[2038\] chan_sip.c: Registration from '\' failed for '77.247.110.201:63139' - Wrong password
\[2019-10-21 04:53:25\] SECURITY\[2046\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-21T04:53:25.822-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1223",SessionID="0x7f6130804e48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.201/63139",Challenge="228c5f03",ReceivedChallenge="228c5f03",ReceivedHash="0a714630e618fa1b40ab3a30d3825d13"
\[2019-10-21 04:53:25\] NOTICE\[2038\] chan_sip.c: Registration from '\' failed for '77.247.110.201:63140' - Wrong password
\[2019-10-21 04:53:25\] SECURITY\[2046\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-21T04:53:25.823-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="1223",SessionID="0x7f6130477218",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/190.140.33.33/ 
 
 PA - 1H : (6)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : PA 
 NAME ASN : ASN18809 
 
 IP : 190.140.33.33 
 
 CIDR : 190.140.32.0/19 
 
 PREFIX COUNT : 383 
 
 UNIQUE IP COUNT : 401152 
 
 
 ATTACKS DETECTED ASN18809 :  
  1H - 1 
  3H - 2 
  6H - 3 
 12H - 4 
 24H - 4 
 
 DateTime : 2019-10-21 05:47:16 
 
 INFO : Port MAX SCAN Scan Detected and Blocked by ADMIN  - data recovery

2019-10-21T03:44:26.4819411495-001 sshd\[62696\]: Invalid user user from 201.198.151.8 port 43148
2019-10-21T03:44:26.4889841495-001 sshd\[62696\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.198.151.8
2019-10-21T03:44:29.1557061495-001 sshd\[62696\]: Failed password for invalid user user from 201.198.151.8 port 43148 ssh2
2019-10-21T04:02:59.2363361495-001 sshd\[63486\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.198.151.8  user=root
2019-10-21T04:03:01.3658291495-001 sshd\[63486\]: Failed password for root from 201.198.151.8 port 35035 ssh2
2019-10-21T04:21:30.2330911495-001 sshd\[64231\]: Invalid user wk from 201.198.151.8 port 55148
2019-10-21T04:21:30.2394491495-001 sshd\[64231\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=201.198.151.8
...

WordPress login Brute force / Web App Attack on client site.