Sep 11 17:50:14 dallas01 sshd[22871]: Failed password for root from 218.98.40.147 port 38214 ssh2
Sep 11 17:50:15 dallas01 sshd[22871]: Failed password for root from 218.98.40.147 port 38214 ssh2
Sep 11 17:50:17 dallas01 sshd[22871]: Failed password for root from 218.98.40.147 port 38214 ssh2

Oct  8 19:29:24 hosting sshd[1471]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=53.ip-51-254-210.eu  user=root
Oct  8 19:29:26 hosting sshd[1471]: Failed password for root from 51.254.210.53 port 46976 ssh2
...

Lonely Russian Girls  
 Get a Hot Date with Russian Beauties 
IP 173.82.195.228

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/119.62.62.23/ 
 CN - 1H : (574)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN4837 
 
 IP : 119.62.62.23 
 
 CIDR : 119.62.0.0/16 
 
 PREFIX COUNT : 1262 
 
 UNIQUE IP COUNT : 56665856 
 
 
 WYKRYTE ATAKI Z ASN4837 :  
  1H - 6 
  3H - 29 
  6H - 60 
 12H - 126 
 24H - 233 
 
 DateTime : 2019-10-08 13:46:55 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

IP Ban Report : https://help-dysk.pl/wordpress-firewall-plugins/ip/111.2.75.195/ 
 CN - 1H : (574)  
 Protection Against DDoS WordPress plugin :  
 "odzyskiwanie danych help-dysk" 
 IP Address Ranges by Country : CN 
 NAME ASN : ASN56041 
 
 IP : 111.2.75.195 
 
 CIDR : 111.2.64.0/19 
 
 PREFIX COUNT : 1316 
 
 UNIQUE IP COUNT : 2946560 
 
 
 WYKRYTE ATAKI Z ASN56041 :  
  1H - 1 
  3H - 1 
  6H - 1 
 12H - 1 
 24H - 1 
 
 DateTime : 2019-10-08 13:46:55 
 
 INFO : Port Scan TELNET Detected and Blocked by ADMIN  - data recovery

SSH Brute Force

WordPress wp-login brute force :: 222.239.90.55 0.052 BYPASS [09/Oct/2019:06:06:01  1100] [censored_2] "POST /wp-login.php HTTP/1.1" 200 4630 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"

Oct  8 13:47:02 ns37 sshd[786]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.59.94.225

Oct  8 21:16:48 icinga sshd[1355]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.49.225.93 
Oct  8 21:16:50 icinga sshd[1355]: Failed password for invalid user admin from 37.49.225.93 port 32721 ssh2
Oct  8 21:16:51 icinga sshd[1355]: error: Received disconnect from 37.49.225.93 port 32721:3: com.jcraft.jsch.JSchException: Auth fail [preauth]
...

Oct  8 18:07:43 web1 sshd\[31734\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.84.8.43  user=root
Oct  8 18:07:45 web1 sshd\[31734\]: Failed password for root from 119.84.8.43 port 42114 ssh2
Oct  8 18:11:38 web1 sshd\[32014\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.84.8.43  user=root
Oct  8 18:11:39 web1 sshd\[32014\]: Failed password for root from 119.84.8.43 port 54371 ssh2
Oct  8 18:15:45 web1 sshd\[32234\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=119.84.8.43  user=root

Automatic report - XMLRPC Attack

2019-10-08T13:47:11.113619stark.klein-stark.info postfix/smtpd\[6045\]: NOQUEUE: reject: RCPT from garrulous.heptezu.com\[81.28.111.156\]: 554 5.7.1 \: Relay access denied\; from=\ to=\ proto=ESMTP helo=\
...

B: Magento admin pass test (wrong country)

Default IP, Non-Browser, Bad UA (none),  Port Scan & Connects
2019-10-07 21:08:05 72.79.25.123 HTTP/1.1 GET /

Oct  8 17:54:07 MK-Soft-Root2 sshd[5519]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.61.105.78 
Oct  8 17:54:09 MK-Soft-Root2 sshd[5519]: Failed password for invalid user 1@3$qWeR from 182.61.105.78 port 52694 ssh2
...