Oct  7 22:46:43 icinga sshd[51116]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.221.179.46 
Oct  7 22:46:45 icinga sshd[51116]: Failed password for invalid user admin from 37.221.179.46 port 44878 ssh2
Oct  7 22:46:48 icinga sshd[51303]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.221.179.46 
...

Oct  8 17:09:55 vm0 sshd[10275]: Failed password for root from 69.85.84.14 port 47566 ssh2
...

2020-10-08T20:48:31.499462shield sshd\[11823\]: Invalid user ftpuser1 from 34.126.118.178 port 1060
2020-10-08T20:48:31.510174shield sshd\[11823\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.118.126.34.bc.googleusercontent.com
2020-10-08T20:48:33.272636shield sshd\[11823\]: Failed password for invalid user ftpuser1 from 34.126.118.178 port 1060 ssh2
2020-10-08T20:52:32.082832shield sshd\[12407\]: Invalid user chris from 34.126.118.178 port 1071
2020-10-08T20:52:32.090016shield sshd\[12407\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.118.126.34.bc.googleusercontent.com

Triggered by Fail2Ban at Ares web server

Oct  8 23:12:57 h2829583 sshd[1861]: Failed password for root from 49.235.111.75 port 56290 ssh2

Oct  8 22:32:36 jane sshd[771]: Failed password for root from 142.93.254.122 port 57012 ssh2
...

Oct  8 20:06:24 host1 sshd[1594409]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.71.159  user=root
Oct  8 20:06:26 host1 sshd[1594409]: Failed password for root from 106.12.71.159 port 56632 ssh2
...

Oct  9 06:12:13 localhost sshd[171885]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=36.82.106.238  user=root
Oct  9 06:12:15 localhost sshd[171885]: Failed password for root from 36.82.106.238 port 43490 ssh2
...

Unauthorized admin access - /admin/css/datepicker.css?v=913-new-social-icons033bdff474ed2c72

2020-10-07 23:07:11 dovecot_login authenticator failed for \(WIN-25FFVSIPLS1\) \[37.120.198.197\]: 535 Incorrect authentication data \(set_id=infoeozo\)
2020-10-07 23:07:11 H=\(WIN-25FFVSIPLS1\) \[37.120.198.197\] sender verify fail for \: Unrouteable address
2020-10-07 23:07:11 H=\(WIN-25FFVSIPLS1\) \[37.120.198.197\] F=\ rejected RCPT \: Sender verify failed
2020-10-07 23:07:23 dovecot_login authenticator failed for \(WIN-25FFVSIPLS1\) \[37.120.198.197\]: 535 Incorrect authentication data \(set_id=info\)
2020-10-07 23:07:23 H=\(WIN-25FFVSIPLS1\) \[37.120.198.197\] F=\ rejected RCPT \: relay not permitted

Oct  8 20:36:48 plex-server sshd[2241369]: Failed password for root from 112.85.42.74 port 19800 ssh2
Oct  8 20:39:49 plex-server sshd[2244019]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.74  user=root
Oct  8 20:39:51 plex-server sshd[2244019]: Failed password for root from 112.85.42.74 port 17699 ssh2
Oct  8 20:43:06 plex-server sshd[2245412]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.74  user=root
Oct  8 20:43:08 plex-server sshd[2245412]: Failed password for root from 112.85.42.74 port 23552 ssh2
...

Wordpress

Unauthorized connection attempt detected from IP address 171.252.202.151 to port 23 [T]

Oct  8 17:04:51 nextcloud sshd\[7680\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.151.2.98  user=root
Oct  8 17:04:53 nextcloud sshd\[7680\]: Failed password for root from 182.151.2.98 port 37211 ssh2
Oct  8 17:08:35 nextcloud sshd\[12464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=182.151.2.98  user=root

Oct  8 20:43:43 scw-6657dc sshd[29414]: Failed password for root from 218.92.0.250 port 23411 ssh2
Oct  8 20:43:43 scw-6657dc sshd[29414]: Failed password for root from 218.92.0.250 port 23411 ssh2
Oct  8 20:43:47 scw-6657dc sshd[29414]: Failed password for root from 218.92.0.250 port 23411 ssh2
...