Oct  1 22:26:20 vpn01 sshd[25783]: Failed password for root from 222.186.15.204 port 59975 ssh2
...

kidness.family 109.2.131.14 \[01/Oct/2019:23:05:30 +0200\] "POST /wp-login.php HTTP/1.1" 200 5615 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"
kidness.family 109.2.131.14 \[01/Oct/2019:23:05:31 +0200\] "POST /wp-login.php HTTP/1.1" 200 5569 "-" "Mozilla/5.0 \(X11\; Ubuntu\; Linux x86_64\; rv:62.0\) Gecko/20100101 Firefox/62.0"

Oct  1 23:33:24 dcd-gentoo sshd[11251]: User root from 222.186.15.160 not allowed because none of user's groups are listed in AllowGroups
Oct  1 23:33:27 dcd-gentoo sshd[11251]: error: PAM: Authentication failure for illegal user root from 222.186.15.160
Oct  1 23:33:24 dcd-gentoo sshd[11251]: User root from 222.186.15.160 not allowed because none of user's groups are listed in AllowGroups
Oct  1 23:33:27 dcd-gentoo sshd[11251]: error: PAM: Authentication failure for illegal user root from 222.186.15.160
Oct  1 23:33:24 dcd-gentoo sshd[11251]: User root from 222.186.15.160 not allowed because none of user's groups are listed in AllowGroups
Oct  1 23:33:27 dcd-gentoo sshd[11251]: error: PAM: Authentication failure for illegal user root from 222.186.15.160
Oct  1 23:33:27 dcd-gentoo sshd[11251]: Failed keyboard-interactive/pam for invalid user root from 222.186.15.160 port 52050 ssh2
...

Automated report - ssh fail2ban:
Oct 1 22:29:40 wrong password, user=root, port=35515, ssh2
Oct 1 22:29:44 wrong password, user=root, port=35515, ssh2
Oct 1 22:29:47 wrong password, user=root, port=35515, ssh2

Attempt to attack host OS, exploiting network vulnerabilities, on 01-10-2019 22:05:15.

RDPBruteFlS

Oct  1 17:00:49 xtremcommunity sshd\[81988\]: Invalid user oracle from 51.68.97.191 port 58880
Oct  1 17:00:49 xtremcommunity sshd\[81988\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.97.191
Oct  1 17:00:50 xtremcommunity sshd\[81988\]: Failed password for invalid user oracle from 51.68.97.191 port 58880 ssh2
Oct  1 17:05:46 xtremcommunity sshd\[82100\]: Invalid user team from 51.68.97.191 port 43258
Oct  1 17:05:46 xtremcommunity sshd\[82100\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.68.97.191
...

Oct  1 11:31:48 php1 sshd\[26459\]: Invalid user pas from 177.17.155.31
Oct  1 11:31:48 php1 sshd\[26459\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.17.155.31
Oct  1 11:31:50 php1 sshd\[26459\]: Failed password for invalid user pas from 177.17.155.31 port 49312 ssh2
Oct  1 11:37:57 php1 sshd\[27121\]: Invalid user edgar from 177.17.155.31
Oct  1 11:37:57 php1 sshd\[27121\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=177.17.155.31

Oct  1 23:05:42 saschabauer sshd[28086]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.218.64.111
Oct  1 23:05:44 saschabauer sshd[28086]: Failed password for invalid user postgres from 182.218.64.111 port 49622 ssh2

Oct  1 23:05:32 MK-Soft-Root1 sshd[7440]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.25.177.241 
Oct  1 23:05:34 MK-Soft-Root1 sshd[7440]: Failed password for invalid user guest from 118.25.177.241 port 41543 ssh2
...

Oct  1 23:01:33 SilenceServices sshd[30352]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.78.87
Oct  1 23:01:34 SilenceServices sshd[30352]: Failed password for invalid user suporte from 217.182.78.87 port 37186 ssh2
Oct  1 23:05:35 SilenceServices sshd[31462]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.78.87

Oct  1 17:19:39 debian sshd\[15331\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.201.101.77  user=root
Oct  1 17:19:41 debian sshd\[15331\]: Failed password for root from 128.201.101.77 port 48044 ssh2
Oct  1 17:24:11 debian sshd\[15387\]: Invalid user sv from 128.201.101.77 port 60368
Oct  1 17:24:11 debian sshd\[15387\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.201.101.77
...

Oct  1 21:05:49 anodpoucpklekan sshd[61420]: Invalid user yf from 61.92.169.178 port 58412
Oct  1 21:05:51 anodpoucpklekan sshd[61420]: Failed password for invalid user yf from 61.92.169.178 port 58412 ssh2
...

\[2019-10-01 16:58:08\] NOTICE\[1948\] chan_sip.c: Registration from '103 \' failed for '77.247.110.215:5060' - Wrong password
\[2019-10-01 16:58:08\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-01T16:58:08.765-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="103",SessionID="0x7f1e1c3735b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.247.110.215/5060",Challenge="5a79f751",ReceivedChallenge="5a79f751",ReceivedHash="aa8a69c66b6fe163ad815cb41d91de93"
\[2019-10-01 17:05:42\] NOTICE\[1948\] chan_sip.c: Registration from '103 \' failed for '77.247.110.215:5060' - Wrong password
\[2019-10-01 17:05:42\] SECURITY\[2006\] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2019-10-01T17:05:42.520-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="103",SessionID="0x7f1e1c3696e8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/77.24

Unauthorised access (Oct  2) SRC=59.8.51.204 LEN=40 TTL=53 ID=28869 TCP DPT=8080 WINDOW=59897 SYN 
Unauthorised access (Oct  1) SRC=59.8.51.204 LEN=40 TTL=53 ID=16702 TCP DPT=8080 WINDOW=59897 SYN