Nov  6 13:56:19 webhost01 sshd[18031]: Failed password for root from 94.179.145.173 port 59302 ssh2
...

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/95.233.238.237/ 
 
 IT - 1H : (98)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : IT 
 NAME ASN : ASN3269 
 
 IP : 95.233.238.237 
 
 CIDR : 95.232.0.0/15 
 
 PREFIX COUNT : 550 
 
 UNIQUE IP COUNT : 19507712 
 
 
 ATTACKS DETECTED ASN3269 :  
  1H - 2 
  3H - 5 
  6H - 12 
 12H - 25 
 24H - 55 
 
 DateTime : 2019-11-06 07:23:16 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

Jan 10 02:44:31 mail sshd\[10278\]: Invalid user tomcat from 118.163.181.157 port 47508
Jan 10 02:44:31 mail sshd\[10278\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.163.181.157
Jan 10 02:44:33 mail sshd\[10278\]: Failed password for invalid user tomcat from 118.163.181.157 port 47508 ssh2
Jan 10 02:50:28 mail sshd\[13053\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.163.181.157  user=www-data
Jan 10 02:50:30 mail sshd\[13053\]: Failed password for www-data from 118.163.181.157 port 51356 ssh2
Jan 18 15:37:14 mail sshd\[18139\]: Invalid user vyatta from 118.163.181.157 port 47948
Jan 18 15:37:14 mail sshd\[18139\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.163.181.157
Jan 18 15:37:16 mail sshd\[18139\]: Failed password for invalid user vyatta from 118.163.181.157 port 47948 ssh2
Jan 18 15:45:34 mail sshd\[23586\]: Invalid user vbox from 118.163.181.157 p

CloudCIX Reconnaissance Scan Detected, PTR: PTR record not found

postfix (unknown user, SPF fail or relay access denied)

/wp-login.php

CloudCIX Reconnaissance Scan Detected, PTR: 229.98.197.104.bc.googleusercontent.com.

CloudCIX Reconnaissance Scan Detected, PTR: ns3152050.ip-51-89-41.eu.

Nov  6 12:53:40 MK-Soft-VM4 sshd[1922]: Failed password for root from 62.28.34.125 port 37700 ssh2
Nov  6 12:57:28 MK-Soft-VM4 sshd[4051]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=62.28.34.125 
...

(From freestoneed@gmail.com) Hello! 

Is your website generating enough business for you, or do you need some help? I am an experienced Search Engine Optimizer and I'm looking for clients who are interested in getting their businesses on top of the searches on search engines like Google. I do this kind of work for a very affordable price. 

Optimal efficiency is something that I value greatly and if this is something you're also interested in, I would be happy to give you a call and tell you about the work I do. Please let me know about when's the best time to contact you. 

Best regards,
Ed Freestone

2019-11-06T08:39:05.992910abusebot-2.cloudsearch.cf sshd\[29373\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.26.23.225  user=root

Nov  6 12:43:54 legacy sshd[28318]: Failed password for root from 222.186.175.155 port 28694 ssh2
Nov  6 12:44:12 legacy sshd[28318]: error: maximum authentication attempts exceeded for root from 222.186.175.155 port 28694 ssh2 [preauth]
Nov  6 12:44:22 legacy sshd[28328]: Failed password for root from 222.186.175.155 port 34234 ssh2
...

Connection by 51.91.212.79 on port: 1025 got caught by honeypot at 11/6/2019 10:55:07 AM

firewall-block, port(s): 80/tcp

Automatic report - Banned IP Access