SSH Bruteforce attempt

$f2bV_matches

2020-02-09T15:41:44.311144wiz-ks3 sshd[4109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.171  user=root
2020-02-09T15:41:45.809723wiz-ks3 sshd[4109]: Failed password for root from 218.92.0.171 port 19572 ssh2
2020-02-09T15:41:49.633890wiz-ks3 sshd[4109]: Failed password for root from 218.92.0.171 port 19572 ssh2
2020-02-09T15:41:44.311144wiz-ks3 sshd[4109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.171  user=root
2020-02-09T15:41:45.809723wiz-ks3 sshd[4109]: Failed password for root from 218.92.0.171 port 19572 ssh2
2020-02-09T15:41:49.633890wiz-ks3 sshd[4109]: Failed password for root from 218.92.0.171 port 19572 ssh2
2020-02-09T15:41:44.311144wiz-ks3 sshd[4109]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.171  user=root
2020-02-09T15:41:45.809723wiz-ks3 sshd[4109]: Failed password for root from 218.92.0.171 port 19572 ssh2
2020-02-09T15:41:49.63389

Feb  9 11:38:02 firewall sshd[21902]: Invalid user xzr from 45.183.193.1
Feb  9 11:38:05 firewall sshd[21902]: Failed password for invalid user xzr from 45.183.193.1 port 52808 ssh2
Feb  9 11:41:49 firewall sshd[22074]: Invalid user obf from 45.183.193.1
...

4786/tcp 2152/udp 55443/tcp...
[2019-12-28/2020-02-09]4pkt,3pt.(tcp),1pt.(udp)

Feb  9 14:44:53 h2177944 kernel: \[4453924.861976\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.26.29.129 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=56258 PROTO=TCP SPT=40988 DPT=43643 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb  9 14:44:53 h2177944 kernel: \[4453924.861991\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.26.29.129 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=56258 PROTO=TCP SPT=40988 DPT=43643 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb  9 14:47:53 h2177944 kernel: \[4454105.466025\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.26.29.129 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=55612 PROTO=TCP SPT=40988 DPT=47447 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb  9 14:47:53 h2177944 kernel: \[4454105.466041\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.26.29.129 DST=85.214.117.9 LEN=40 TOS=0x00 PREC=0x00 TTL=239 ID=55612 PROTO=TCP SPT=40988 DPT=47447 WINDOW=1024 RES=0x00 SYN URGP=0 
Feb  9 15:40:51 h2177944 kernel: \[4457282.641940\] \[UFW BLOCK\] IN=venet0 OUT= MAC= SRC=194.26.29.129 DST=85.214.1

(From eric@talkwithcustomer.com) 
Hi,

My name is Eric and I was looking at a few different sites online and came across your site staytunedchiropractic.com.  I must say - your website is very impressive.  I am seeing your website on the first page of the Search Engine. 

Have you noticed that 70 percent of visitors who leave your website will never return?  In most cases, this means that 95 percent to 98 percent of your marketing efforts are going to waste, not to mention that you are losing more money in customer acquisition costs than you need to.
 
As a business person, the time and money you put into your marketing efforts is extremely valuable.  So why let it go to waste?  Our users have seen staggering improvements in conversions with insane growths of 150 percent going upwards of 785 percent. Are you ready to unlock the highest conversion revenue from each of your website visitors?  

TalkWithCustomer is a widget which captures a website visitor’s Name, Email address and Phone Number and then

Automatic report - Port Scan Attack

Port 22 Scan, PTR: None

failed_logins

Feb  9 15:07:23 grey postfix/smtpd\[19654\]: NOQUEUE: reject: RCPT from unknown\[185.143.223.161\]: 554 5.7.1 Service unavailable\; Client host \[185.143.223.161\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[185.143.223.161\]\; from=\ to=\ proto=ESMTP helo=\<\[185.143.223.97\]\>
...

Unauthorised access (Feb  9) SRC=223.17.94.212 LEN=40 TTL=55 ID=50507 TCP DPT=8080 WINDOW=33816 SYN 
Unauthorised access (Feb  7) SRC=223.17.94.212 LEN=40 TTL=54 ID=58664 TCP DPT=8080 WINDOW=52871 SYN 
Unauthorised access (Feb  7) SRC=223.17.94.212 LEN=40 TTL=55 ID=22479 TCP DPT=8080 WINDOW=33816 SYN 
Unauthorised access (Feb  6) SRC=223.17.94.212 LEN=40 TTL=55 ID=34415 TCP DPT=8080 WINDOW=33816 SYN 
Unauthorised access (Feb  2) SRC=223.17.94.212 LEN=40 TTL=55 ID=35749 TCP DPT=8080 WINDOW=33816 SYN

Feb  9 14:36:25 vps sshd\[2042\]: Invalid user gpadmin from 51.91.136.174
Feb  9 14:36:27 vps sshd\[2044\]: Invalid user git from 51.91.136.174
...

$f2bV_matches

Telnetd brute force attack detected by fail2ban