Dec  4 09:42:35 auw2 sshd\[16457\]: Invalid user wwwadmin from 139.59.14.239
Dec  4 09:42:35 auw2 sshd\[16457\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.14.239
Dec  4 09:42:37 auw2 sshd\[16457\]: Failed password for invalid user wwwadmin from 139.59.14.239 port 33406 ssh2
Dec  4 09:49:52 auw2 sshd\[17159\]: Invalid user server from 139.59.14.239
Dec  4 09:49:52 auw2 sshd\[17159\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.14.239

12/04/2019-19:53:48.503035 77.247.108.77 Protocol: 6 ET CINS Active Threat Intelligence Poor Reputation IP group 74

Lines containing failures of 139.155.50.40
Dec  2 19:52:12 shared10 sshd[19989]: Invalid user larine from 139.155.50.40 port 43908
Dec  2 19:52:12 shared10 sshd[19989]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.50.40
Dec  2 19:52:14 shared10 sshd[19989]: Failed password for invalid user larine from 139.155.50.40 port 43908 ssh2
Dec  2 19:52:14 shared10 sshd[19989]: Received disconnect from 139.155.50.40 port 43908:11: Bye Bye [preauth]
Dec  2 19:52:14 shared10 sshd[19989]: Disconnected from invalid user larine 139.155.50.40 port 43908 [preauth]


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=139.155.50.40

Unauthorised access (Dec  4) SRC=179.178.18.24 LEN=52 TOS=0x10 PREC=0x40 TTL=110 ID=22708 DF TCP DPT=445 WINDOW=8192 SYN

Dec  4 19:28:15 l02a sshd[18248]: Invalid user danni from 80.211.13.167
Dec  4 19:28:15 l02a sshd[18248]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=80.211.13.167 
Dec  4 19:28:15 l02a sshd[18248]: Invalid user danni from 80.211.13.167
Dec  4 19:28:17 l02a sshd[18248]: Failed password for invalid user danni from 80.211.13.167 port 46174 ssh2

Dec  4 19:28:18 localhost sshd\[17592\]: Invalid user bruce from 112.30.185.8 port 35362
Dec  4 19:28:18 localhost sshd\[17592\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.30.185.8
Dec  4 19:28:21 localhost sshd\[17592\]: Failed password for invalid user bruce from 112.30.185.8 port 35362 ssh2
...

[portscan] Port scan

180.250.204.162 - - [04/Dec/2019:12:13:55 +0100] "GET /awstats.pl?lang=en&output=main HTTP/1.0" 404 280 "https://oraux.pnzone.net/" "Mozilla/5.0 (Windows NT 10.0; WOW64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/66.0.3359.170 Safari/537.36"

Received: from localhost (5.9.36.180) by ExchangeServer.*.* (10.0.7.78) with Microsoft SMTP Server id 14.3.468.0; Wed, 4 Dec 2019 
11:01:** +0100
Received: by localhost (Postfix, from userid 0)            id B2E2EA*****; Wed,  4 Dec 2019 04:00:** -0500 (EST)
To: <*@*.de>
Subject: Der Einweisungsprozess ist obligatorisch #DE1D22H11788Z*..*
From: DeutscheBank  
MIME-Version: 1.0
Content-Type: text/html; charset="UTF-8"
Date: Wed, 4 Dec 2019 04:00:* -0500
Return-Path: root@localhost

Dec  4 19:35:59 gw1 sshd[8571]: Failed password for daemon from 118.25.126.32 port 55226 ssh2
...

hacking attempts reported by Microsoft from 177.73.8.230 on a UK account for a recent data breach reported on https://haveibeenpwned.com/

Repeated brute force against a port

IP was detected trying to Brute-Force SSH, FTP, Web Apps or Hacking.

Dec  4 13:54:53 [host] sshd[3742]: Invalid user blahuta from 92.46.40.110
Dec  4 13:54:53 [host] sshd[3742]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=92.46.40.110
Dec  4 13:54:55 [host] sshd[3742]: Failed password for invalid user blahuta from 92.46.40.110 port 48057 ssh2

F2B jail: sshd. Time: 2019-12-04 20:12:48, Reported by: VKReport