Oct  4 22:15:50 MainVPS sshd[8959]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.13.247  user=root
Oct  4 22:15:51 MainVPS sshd[8959]: Failed password for root from 106.12.13.247 port 53228 ssh2
Oct  4 22:19:38 MainVPS sshd[9225]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.13.247  user=root
Oct  4 22:19:39 MainVPS sshd[9225]: Failed password for root from 106.12.13.247 port 59972 ssh2
Oct  4 22:23:28 MainVPS sshd[9477]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.13.247  user=root
Oct  4 22:23:30 MainVPS sshd[9477]: Failed password for root from 106.12.13.247 port 38480 ssh2
...

Automatic report - XMLRPC Attack

Oct  5 01:27:38 root sshd[24452]: Failed password for root from 222.186.173.180 port 22404 ssh2
Oct  5 01:27:45 root sshd[24452]: Failed password for root from 222.186.173.180 port 22404 ssh2
Oct  5 01:27:50 root sshd[24452]: Failed password for root from 222.186.173.180 port 22404 ssh2
Oct  5 01:27:56 root sshd[24452]: Failed password for root from 222.186.173.180 port 22404 ssh2
...

Automatic report - Banned IP Access

1433/tcp 8444/tcp 9595/tcp...
[2019-08-06/10-04]33pkt,12pt.(tcp),1pt.(udp)

Oct  4 23:24:13 game-panel sshd[8589]: Failed password for root from 103.133.215.198 port 40456 ssh2
Oct  4 23:29:02 game-panel sshd[8714]: Failed password for root from 103.133.215.198 port 54244 ssh2

\[2019-10-05 01:27:18\] NOTICE\[25634\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '45.56.137.37:60053' \(callid: 1229982966-1992965922-565537064\) - Failed to authenticate
\[2019-10-05 01:27:18\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeResponseFailed",EventTV="2019-10-05T01:27:18.119+0200",Severity="Error",Service="PJSIP",EventVersion="1",AccountID="\",SessionID="1229982966-1992965922-565537064",LocalAddress="IPV4/UDP/188.40.118.248/5060",RemoteAddress="IPV4/UDP/45.56.137.37/60053",Challenge="1570231638/3d4a6ba980ffef051bd961920cb803ed",Response="2314f0d7c9aa78e249c2809489b9b493",ExpectedResponse=""
\[2019-10-05 01:27:18\] NOTICE\[24264\] res_pjsip/pjsip_distributor.c: Request 'REGISTER' from '\' failed for '45.56.137.37:60053' \(callid: 1229982966-1992965922-565537064\) - Failed to authenticate
\[2019-10-05 01:27:18\] SECURITY\[1715\] res_security_log.c: SecurityEvent="ChallengeRespon

Oct  5 00:25:21 dev0-dcfr-rnet sshd[1432]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.204.185.106
Oct  5 00:25:23 dev0-dcfr-rnet sshd[1432]: Failed password for invalid user P@r0la@abc from 121.204.185.106 port 48608 ssh2
Oct  5 00:29:16 dev0-dcfr-rnet sshd[1447]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=121.204.185.106

Oct  5 01:29:20 mail sshd\[10429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.55.92.90  user=root
Oct  5 01:29:22 mail sshd\[10429\]: Failed password for root from 67.55.92.90 port 39448 ssh2
Oct  5 01:33:25 mail sshd\[10775\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.55.92.90  user=root
Oct  5 01:33:27 mail sshd\[10775\]: Failed password for root from 67.55.92.90 port 60210 ssh2
Oct  5 01:37:30 mail sshd\[11077\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=67.55.92.90  user=root

Oct  5 01:19:46 herz-der-gamer sshd[27949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=153.36.236.35  user=root
Oct  5 01:19:48 herz-der-gamer sshd[27949]: Failed password for root from 153.36.236.35 port 62507 ssh2
Oct  5 01:19:51 herz-der-gamer sshd[27949]: Failed password for root from 153.36.236.35 port 62507 ssh2
...

postfix (unknown user, SPF fail or relay access denied)

Automatic report - XMLRPC Attack

27017/tcp 11211/tcp 389/tcp...
[2019-08-04/10-04]42pkt,11pt.(tcp),2pt.(udp)

WordPress XMLRPC scan :: 172.255.82.195 0.324 BYPASS [05/Oct/2019:06:23:18  1000] www.[censored_1] "POST /xmlrpc.php HTTP/1.1" 200 382 "https://www.[censored_1]/" "PHP/7.3.48"

WordPress XMLRPC scan :: 157.230.235.238 0.056 BYPASS [05/Oct/2019:08:30:12  1000] [censored_2] "POST /xmlrpc.php HTTP/1.1" 200 413 "-" "Mozilla/5.0 (X11; Ubuntu; Linux x86_64; rv:62.0) Gecko/20100101 Firefox/62.0"