ssh failed login

Nov  9 23:41:27 server sshd\[25279\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.34.52  user=root
Nov  9 23:41:29 server sshd\[25279\]: Failed password for root from 152.136.34.52 port 48960 ssh2
Nov  9 23:52:14 server sshd\[29396\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.34.52  user=nginx
Nov  9 23:52:16 server sshd\[29396\]: Failed password for nginx from 152.136.34.52 port 45632 ssh2
Nov  9 23:57:26 server sshd\[31452\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.34.52  user=root
...

Nov  9 17:14:00 icecube postfix/smtpd[6552]: NOQUEUE: reject: RCPT from unknown[78.93.119.9]: 554 5.7.1 Service unavailable; Client host [78.93.119.9] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS / https://www.spamhaus.org/query/ip/78.93.119.9; from= to= proto=ESMTP helo=<[78.93.119.9]>

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/129.204.95.39/ 
 
 CN - 1H : (125)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN45090 
 
 IP : 129.204.95.39 
 
 CIDR : 129.204.64.0/18 
 
 PREFIX COUNT : 1788 
 
 UNIQUE IP COUNT : 2600192 
 
 
 ATTACKS DETECTED ASN45090 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 2 
 24H - 4 
 
 DateTime : 2019-11-09 17:13:39 
 
 INFO : Port SSH 22 Scan Detected and Blocked by ADMIN  - data recovery

$f2bV_matches

Nov  9 22:32:04 mc1 kernel: \[4621412.538408\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=18359 PROTO=TCP SPT=45249 DPT=43400 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  9 22:34:53 mc1 kernel: \[4621580.761603\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=12727 PROTO=TCP SPT=45249 DPT=64300 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  9 22:35:04 mc1 kernel: \[4621592.048471\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=45.136.109.215 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=54992 PROTO=TCP SPT=45249 DPT=14888 WINDOW=1024 RES=0x00 SYN URGP=0 
...

Automatic report - XMLRPC Attack

Nov  9 17:28:47 vps691689 sshd[5268]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.196.60.203
Nov  9 17:28:49 vps691689 sshd[5268]: Failed password for invalid user IDCSEO2011 from 190.196.60.203 port 65195 ssh2
...

2019-11-09T21:14:11.349312abusebot-5.cloudsearch.cf sshd\[17019\]: Invalid user legal1 from 123.215.174.102 port 57342

Automatic report - XMLRPC Attack

TCP Port Scanning

SMB Server BruteForce Attack

Nov  4 03:23:45 new sshd[14965]: Failed password for invalid user shengyetest from 106.54.24.233 port 45062 ssh2
Nov  4 03:23:45 new sshd[14965]: Received disconnect from 106.54.24.233: 11: Bye Bye [preauth]
Nov  4 03:39:42 new sshd[19670]: Failed password for invalid user ghost from 106.54.24.233 port 48340 ssh2
Nov  4 03:39:43 new sshd[19670]: Received disconnect from 106.54.24.233: 11: Bye Bye [preauth]
Nov  4 03:43:08 new sshd[20275]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.54.24.233  user=r.r
Nov  4 03:43:10 new sshd[20275]: Failed password for r.r from 106.54.24.233 port 50538 ssh2
Nov  4 03:43:10 new sshd[20275]: Received disconnect from 106.54.24.233: 11: Bye Bye [preauth]
Nov  4 03:46:39 new sshd[21390]: Failed password for invalid user poster from 106.54.24.233 port 52736 ssh2
Nov  4 03:46:39 new sshd[21390]: Received disconnect from 106.54.24.233: 11: Bye Bye [preauth]


........
-----------------------------------------------
https://www.blocklis

proto=tcp  .  spt=54764  .  dpt=25  .     (Listed on    truncate-gbudb also unsubscore and rbldns-ru)     (883)

Automatic report - Banned IP Access