File manager access, accessed by IP not domain: 
60.191.66.222 - - [18/Nov/2019:05:22:25 +0000] "GET /manager/html HTTP/1.1" 404 330 "-" "Mozilla/5.0 (compatible; MSIE 10.0; Windows NT 6.2; WOW64; Trident/6.0)"

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/179.103.142.247/ 
 
 BR - 1H : (316)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : BR 
 NAME ASN : ASN26599 
 
 IP : 179.103.142.247 
 
 CIDR : 179.103.0.0/16 
 
 PREFIX COUNT : 445 
 
 UNIQUE IP COUNT : 9317376 
 
 
 ATTACKS DETECTED ASN26599 :  
  1H - 1 
  3H - 1 
  6H - 2 
 12H - 3 
 24H - 4 
 
 DateTime : 2019-11-19 05:58:52 
 
 INFO :  HACK ! - Looking for resource vulnerabilities Scan Detected and Blocked by ADMIN  - data recovery

Nov 19 05:54:52 OPSO sshd\[31356\]: Invalid user saonah from 185.246.75.146 port 56642
Nov 19 05:54:52 OPSO sshd\[31356\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.246.75.146
Nov 19 05:54:54 OPSO sshd\[31356\]: Failed password for invalid user saonah from 185.246.75.146 port 56642 ssh2
Nov 19 05:59:14 OPSO sshd\[32152\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.246.75.146  user=mysql
Nov 19 05:59:16 OPSO sshd\[32152\]: Failed password for mysql from 185.246.75.146 port 35928 ssh2

Nov 19 05:55:31 MK-Soft-Root2 sshd[6474]: Failed password for root from 123.136.161.146 port 37296 ssh2
...

port scan and connect, tcp 80 (http)

\[2019-11-18 23:55:21\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.85.101:59335' - Wrong password
\[2019-11-18 23:55:21\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-18T23:55:21.535-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="1019",SessionID="0x7fdf2cc50ca8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85.101/59335",Challenge="447ef86c",ReceivedChallenge="447ef86c",ReceivedHash="3f118bed1205cab5a30150c325b90e0a"
\[2019-11-18 23:59:04\] NOTICE\[2601\] chan_sip.c: Registration from '\' failed for '81.171.85.101:56269' - Wrong password
\[2019-11-18 23:59:04\] SECURITY\[2634\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-11-18T23:59:04.868-0500",Severity="Error",Service="SIP",EventVersion="2",AccountID="4862",SessionID="0x7fdf2cd1cd48",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/81.171.85

11/18/2019-19:51:53.588716 185.175.93.101 Protocol: 6 ET DROP Dshield Block Listed Source group 1

Nov 19 06:02:47 MainVPS sshd[1115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.9  user=root
Nov 19 06:02:49 MainVPS sshd[1115]: Failed password for root from 222.186.180.9 port 31460 ssh2
Nov 19 06:03:01 MainVPS sshd[1115]: error: maximum authentication attempts exceeded for root from 222.186.180.9 port 31460 ssh2 [preauth]
Nov 19 06:02:47 MainVPS sshd[1115]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.9  user=root
Nov 19 06:02:49 MainVPS sshd[1115]: Failed password for root from 222.186.180.9 port 31460 ssh2
Nov 19 06:03:01 MainVPS sshd[1115]: error: maximum authentication attempts exceeded for root from 222.186.180.9 port 31460 ssh2 [preauth]
Nov 19 06:03:06 MainVPS sshd[1440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.9  user=root
Nov 19 06:03:08 MainVPS sshd[1440]: Failed password for root from 222.186.180.9 port 38770 ssh2
...

IMAP brute force
...

2019-11-19T04:59:27.164841abusebot-5.cloudsearch.cf sshd\[25172\]: Invalid user hp from 112.186.77.98 port 50838
2019-11-19T04:59:27.169874abusebot-5.cloudsearch.cf sshd\[25172\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.186.77.98

Nov 19 01:53:20 ns3367391 sshd[26435]: Invalid user pi from 92.12.154.145 port 51260
Nov 19 01:53:20 ns3367391 sshd[26437]: Invalid user pi from 92.12.154.145 port 51266
...

2019-11-19T04:59:09.882055abusebot.cloudsearch.cf sshd\[31943\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.25.101.74  user=root

Nov 18 19:50:52 TORMINT sshd\[19482\]: Invalid user test123$ from 111.93.94.10
Nov 18 19:50:52 TORMINT sshd\[19482\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.93.94.10
Nov 18 19:50:54 TORMINT sshd\[19482\]: Failed password for invalid user test123$ from 111.93.94.10 port 37306 ssh2
...

IMAP/SMTP Authentication Failure

Nov 19 00:49:21 meumeu sshd[1091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=206.189.145.251 
Nov 19 00:49:22 meumeu sshd[1091]: Failed password for invalid user pcap from 206.189.145.251 port 35198 ssh2
Nov 19 00:53:13 meumeu sshd[1768]: Failed password for root from 206.189.145.251 port 42918 ssh2
...