WordPress login Brute force / Web App Attack on client site.

2020-07-12T11:17:22.967871afi-git.jinr.ru sshd[19110]: Failed password for root from 222.186.169.192 port 11462 ssh2
2020-07-12T11:17:26.786925afi-git.jinr.ru sshd[19110]: Failed password for root from 222.186.169.192 port 11462 ssh2
2020-07-12T11:17:30.152899afi-git.jinr.ru sshd[19110]: Failed password for root from 222.186.169.192 port 11462 ssh2
2020-07-12T11:17:30.153045afi-git.jinr.ru sshd[19110]: error: maximum authentication attempts exceeded for root from 222.186.169.192 port 11462 ssh2 [preauth]
2020-07-12T11:17:30.153059afi-git.jinr.ru sshd[19110]: Disconnecting: Too many authentication failures [preauth]
...

[Sat Jul 11 22:44:24.103029 2020] [php7:error] [pid 2808] [client 103.81.85.21:50263] script /Library/Server/Web/Data/Sites/interfaithministryservices.com/wp-login.php not found or unable to stat, referer: http://reverendrhonda.com/wp-login.php

[2020-07-12 04:14:24] NOTICE[1150][C-0000260b] chan_sip.c: Call from '' (156.96.128.154:64251) to extension '501146132660944' rejected because extension not found in context 'public'.
[2020-07-12 04:14:24] SECURITY[1167] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-12T04:14:24.393-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="501146132660944",SessionID="0x7fcb4c3b1558",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/156.96.128.154/64251",ACLName="no_extension_match"
[2020-07-12 04:19:22] NOTICE[1150][C-0000260e] chan_sip.c: Call from '' (156.96.128.154:59192) to extension '+01146132660944' rejected because extension not found in context 'public'.
[2020-07-12 04:19:22] SECURITY[1167] res_security_log.c: SecurityEvent="FailedACL",EventTV="2020-07-12T04:19:22.383-0400",Severity="Error",Service="SIP",EventVersion="1",AccountID="+01146132660944",SessionID="0x7fcb4c0dfe08",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/U
...

Jul 12 13:51:13 localhost sshd[378524]: Invalid user postgres from 120.70.98.132 port 40554
...

1594525872 - 07/12/2020 05:51:12 Host: 101.51.225.123/101.51.225.123 Port: 445 TCP Blocked

(From verajohn@fanclub.pm) Hi,  this is Leonrad. 
 
Today I have good news for you, witch you can get $30 free bonus in a minute. 
 
All you have to do is to register Vera & John online casino link below and that's it. 
You can register by free e-mail and no need kyc. 
 
Registration form 
https://www3.samuraiclick.com/go?m=28940&c=34&b=926&l=1 
 
After you get your free bonus, play casino and make money! 
Many people sent me thanks mail because they won more than $2,000-$10,000 
by trusting me. 
 
Don’t miss this chance and don't for get that your chance is just infront of you. 
Get free bonus and win your life! 
 
 
 
You can with draw your prize by Bitcoin, so If you need best crypto debit card, try Hcard. 
https://bit.ly/31zTBD0 
 
It is Mastercard brand and you can exchange your crypto by Apps. 
Hcard cost you $350 + shipping, but it will definitely worth. 
 
This is how rich people always get their profits. 
So, if you wanna win your life for free, do not miss your last chance.

Jul 12 06:18:29 vps sshd[488996]: Failed password for invalid user postgres from 187.144.212.57 port 44768 ssh2
Jul 12 06:21:52 vps sshd[505679]: Invalid user vincent from 187.144.212.57 port 38520
Jul 12 06:21:52 vps sshd[505679]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.144.212.57
Jul 12 06:21:55 vps sshd[505679]: Failed password for invalid user vincent from 187.144.212.57 port 38520 ssh2
Jul 12 06:25:09 vps sshd[522014]: Invalid user radko from 187.144.212.57 port 60504
...

2020-07-12 06:15:42 dovecot_login authenticator failed for \(User\) \[185.143.72.27\]: 535 Incorrect authentication data \(set_id=euler@no-server.de\)
2020-07-12 06:15:42 dovecot_login authenticator failed for \(User\) \[185.143.72.27\]: 535 Incorrect authentication data \(set_id=euler@no-server.de\)
2020-07-12 06:15:45 dovecot_login authenticator failed for \(User\) \[185.143.72.27\]: 535 Incorrect authentication data \(set_id=euler@no-server.de\)
2020-07-12 06:16:12 dovecot_login authenticator failed for \(User\) \[185.143.72.27\]: 535 Incorrect authentication data \(set_id=andromeda@no-server.de\)
2020-07-12 06:16:14 dovecot_login authenticator failed for \(User\) \[185.143.72.27\]: 535 Incorrect authentication data \(set_id=andromeda@no-server.de\)
2020-07-12 06:16:18 dovecot_login authenticator failed for \(User\) \[185.143.72.27\]: 535 Incorrect authentication data \(set_id=andromeda@no-server.de\)
2020-07-12 06:16:40 dovecot_login authenticator failed for \(User\) \[185.143.72.2
...

Jul 12 07:02:32 mout sshd[7284]: Invalid user roberts from 144.22.108.33 port 55806

Jul 12 06:47:05 piServer sshd[23091]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.38.3.138 
Jul 12 06:47:07 piServer sshd[23091]: Failed password for invalid user amie from 185.38.3.138 port 39052 ssh2
Jul 12 06:50:17 piServer sshd[23380]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.38.3.138 
...

Invalid user zhzyi from 51.68.123.192 port 58426

Jul 12 06:51:44 vpn01 sshd[25231]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=212.64.60.50
Jul 12 06:51:47 vpn01 sshd[25231]: Failed password for invalid user ec2-user from 212.64.60.50 port 56491 ssh2
...

spam form 2020-07-12 05:45

Jul 12 10:40:28 vm1 sshd[17063]: Failed password for root from 222.186.175.183 port 9584 ssh2
Jul 12 10:40:42 vm1 sshd[17063]: error: maximum authentication attempts exceeded for root from 222.186.175.183 port 9584 ssh2 [preauth]
...