[2020-06-07 09:03:42] NOTICE[1288] chan_sip.c: Registration from '' failed for '185.130.184.207:49882' - Wrong password
[2020-06-07 09:03:42] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-07T09:03:42.538-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="7733",SessionID="0x7f4d74373c98",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130.184.207/49882",Challenge="759ba608",ReceivedChallenge="759ba608",ReceivedHash="a3431ad36a4afe6faa1455768f931475"
[2020-06-07 09:05:17] NOTICE[1288] chan_sip.c: Registration from '' failed for '185.130.184.207:59653' - Wrong password
[2020-06-07 09:05:17] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-07T09:05:17.755-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="2004",SessionID="0x7f4d742d3bb8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/185.130
...

Jun  7 15:35:17 mellenthin sshd[27801]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.76  user=root
Jun  7 15:35:19 mellenthin sshd[27801]: Failed password for invalid user root from 222.186.30.76 port 12822 ssh2

Jun  7 16:01:00 ift sshd\[21238\]: Failed password for root from 124.127.206.4 port 55092 ssh2Jun  7 16:01:57 ift sshd\[21311\]: Failed password for root from 124.127.206.4 port 10881 ssh2Jun  7 16:02:55 ift sshd\[21350\]: Failed password for root from 124.127.206.4 port 23155 ssh2Jun  7 16:03:56 ift sshd\[21401\]: Failed password for root from 124.127.206.4 port 35429 ssh2Jun  7 16:04:51 ift sshd\[21499\]: Failed password for root from 124.127.206.4 port 47701 ssh2
...

Jun  7 15:44:42 minden010 sshd[18020]: Failed password for root from 222.186.42.155 port 14643 ssh2
Jun  7 15:44:45 minden010 sshd[18020]: Failed password for root from 222.186.42.155 port 14643 ssh2
Jun  7 15:44:47 minden010 sshd[18020]: Failed password for root from 222.186.42.155 port 14643 ssh2
...

Jun  6 05:10:49 websrv1.derweidener.de postfix/smtpd[3433275]: warning: unknown[87.246.7.70]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  6 05:11:47 websrv1.derweidener.de postfix/smtpd[3434129]: warning: unknown[87.246.7.70]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  6 05:12:20 websrv1.derweidener.de postfix/smtpd[3434129]: warning: unknown[87.246.7.70]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  6 05:13:08 websrv1.derweidener.de postfix/smtpd[3434132]: warning: unknown[87.246.7.70]: SASL LOGIN authentication failed: UGFzc3dvcmQ6
Jun  6 05:13:59 websrv1.derweidener.de postfix/smtpd[3434129]: warning: unknown[87.246.7.70]: SASL LOGIN authentication failed: UGFzc3dvcmQ6

Jun  7 13:29:35 vlre-nyc-1 sshd\[17950\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=218.92.0.173  user=root
Jun  7 13:29:37 vlre-nyc-1 sshd\[17950\]: Failed password for root from 218.92.0.173 port 22120 ssh2
Jun  7 13:29:40 vlre-nyc-1 sshd\[17950\]: Failed password for root from 218.92.0.173 port 22120 ssh2
Jun  7 13:29:43 vlre-nyc-1 sshd\[17950\]: Failed password for root from 218.92.0.173 port 22120 ssh2
Jun  7 13:29:46 vlre-nyc-1 sshd\[17950\]: Failed password for root from 218.92.0.173 port 22120 ssh2
...

Jun  7 14:04:14 vps687878 sshd\[4376\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.238.69  user=root
Jun  7 14:04:16 vps687878 sshd\[4376\]: Failed password for root from 180.76.238.69 port 30318 ssh2
Jun  7 14:06:06 vps687878 sshd\[4669\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.238.69  user=root
Jun  7 14:06:09 vps687878 sshd\[4669\]: Failed password for root from 180.76.238.69 port 54978 ssh2
Jun  7 14:07:54 vps687878 sshd\[4765\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=180.76.238.69  user=root
...

Jun  7 16:13:32 lukav-desktop sshd\[28930\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.177.151  user=root
Jun  7 16:13:33 lukav-desktop sshd\[28930\]: Failed password for root from 139.198.177.151 port 54768 ssh2
Jun  7 16:17:06 lukav-desktop sshd\[18565\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.177.151  user=root
Jun  7 16:17:08 lukav-desktop sshd\[18565\]: Failed password for root from 139.198.177.151 port 41626 ssh2
Jun  7 16:21:02 lukav-desktop sshd\[18667\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.198.177.151  user=root

CMS (WordPress or Joomla) login attempt.

Jun  7 14:45:34 haigwepa sshd[20444]: Failed password for root from 107.170.250.177 port 50360 ssh2
...

$f2bV_matches

scans 2 times in preceeding hours on the ports (in chronological order) 3389 3390 resulting in total of 31 scans from 195.54.166.0/23 block.

Jun  7 15:29:50 vps sshd[394862]: Failed password for root from 178.128.144.227 port 45400 ssh2
Jun  7 15:31:29 vps sshd[404710]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.144.227  user=root
Jun  7 15:31:30 vps sshd[404710]: Failed password for root from 178.128.144.227 port 42998 ssh2
Jun  7 15:33:03 vps sshd[410218]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.144.227  user=root
Jun  7 15:33:05 vps sshd[410218]: Failed password for root from 178.128.144.227 port 40534 ssh2
...

...

Jun  7 15:51:17 server sshd[6828]: Failed password for root from 177.1.213.19 port 31117 ssh2
Jun  7 15:53:33 server sshd[6907]: Failed password for root from 177.1.213.19 port 25242 ssh2
...