Attack was on:
Sep 26 2017 10:03 Attacker: 112.198.73.212 traffic is from: PH TARGET: /wp-login.php