WP Authentication failure

$f2bV_matches

Nov  4 20:41:26 mc1 kernel: \[4182791.702133\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.116 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=243 ID=63346 PROTO=TCP SPT=47923 DPT=43864 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  4 20:43:49 mc1 kernel: \[4182934.890655\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.116 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=15330 PROTO=TCP SPT=47923 DPT=44151 WINDOW=1024 RES=0x00 SYN URGP=0 
Nov  4 20:46:47 mc1 kernel: \[4183112.059483\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:11:a9:7b:d2:74:7f:6e:37:e3:08:00 SRC=81.22.45.116 DST=159.69.205.51 LEN=40 TOS=0x00 PREC=0x00 TTL=244 ID=23938 PROTO=TCP SPT=47923 DPT=43757 WINDOW=1024 RES=0x00 SYN URGP=0 
...

Nov  4 15:58:23 dcd-gentoo sshd[10185]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Nov  4 15:58:26 dcd-gentoo sshd[10185]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Nov  4 15:58:23 dcd-gentoo sshd[10185]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Nov  4 15:58:26 dcd-gentoo sshd[10185]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Nov  4 15:58:23 dcd-gentoo sshd[10185]: User root from 218.92.0.191 not allowed because none of user's groups are listed in AllowGroups
Nov  4 15:58:26 dcd-gentoo sshd[10185]: error: PAM: Authentication failure for illegal user root from 218.92.0.191
Nov  4 15:58:26 dcd-gentoo sshd[10185]: Failed keyboard-interactive/pam for invalid user root from 218.92.0.191 port 27460 ssh2
...

2019-10-31T07:45:56.089717ns547587 sshd\[8912\]: Invalid user vidya from 213.150.207.5 port 58070
2019-10-31T07:45:56.093614ns547587 sshd\[8912\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.150.207.5
2019-10-31T07:45:58.135760ns547587 sshd\[8912\]: Failed password for invalid user vidya from 213.150.207.5 port 58070 ssh2
2019-10-31T07:53:05.420050ns547587 sshd\[11586\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.150.207.5  user=root
2019-10-31T07:53:07.356880ns547587 sshd\[11586\]: Failed password for root from 213.150.207.5 port 52934 ssh2
2019-10-31T07:57:45.122551ns547587 sshd\[13324\]: Invalid user 101 from 213.150.207.5 port 34882
2019-10-31T07:57:45.127634ns547587 sshd\[13324\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.150.207.5
2019-10-31T07:57:47.169687ns547587 sshd\[13324\]: Failed password for invalid user 101 from 213.1
...

WordPress brute force

Honeypot attack, port: 445, PTR: PTR record not found

2019-11-04 08:15:03 H=(winner.com) [37.189.101.188]:61813 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in psbl.surriel.com (127.0.0.2) (Listed in PSBL, see http://psbl.org/listing?ip=37.189.101.188)
2019-11-04 08:26:18 H=(winner.com) [37.189.101.188]:57683 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in psbl.surriel.com (127.0.0.2) (Listed in PSBL, see http://psbl.org/listing?ip=37.189.101.188)
2019-11-04 08:27:51 H=(winner.com) [37.189.101.188]:60328 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in psbl.surriel.com (127.0.0.2) (Listed in PSBL, see http://psbl.org/listing?ip=37.189.101.188)
...

Honeypot attack, port: 23, PTR: PTR record not found

11/04/2019-15:17:42.518315 80.82.70.239 Protocol: 6 ET DROP Dshield Block Listed Source group 1

IP Ban Report :  
 https://help-dysk.pl/wordpress-firewall-plugins/ip/201.189.72.58/ 
 
 CL - 1H : (29)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CL 
 NAME ASN : ASN7418 
 
 IP : 201.189.72.58 
 
 CIDR : 201.188.0.0/15 
 
 PREFIX COUNT : 102 
 
 UNIQUE IP COUNT : 2336000 
 
 
 ATTACKS DETECTED ASN7418 :  
  1H - 4 
  3H - 6 
  6H - 7 
 12H - 11 
 24H - 23 
 
 DateTime : 2019-11-04 15:27:46 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

Nov  4 15:23:43 markkoudstaal sshd[21975]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.183.213.222
Nov  4 15:23:45 markkoudstaal sshd[21975]: Failed password for invalid user coffe from 81.183.213.222 port 62657 ssh2
Nov  4 15:27:47 markkoudstaal sshd[22309]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=81.183.213.222

Automatic report - XMLRPC Attack

Nov  4 22:03:24 vps01 sshd[638]: Failed password for root from 213.209.114.26 port 38696 ssh2

2019-11-04T20:37:50.947406abusebot.cloudsearch.cf sshd\[26654\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.164.195.204  user=root

$f2bV_matches