Apr  5 23:38:04 debian-2gb-nbg1-2 kernel: \[8381713.381705\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=112.90.197.66 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=234 ID=1035 PROTO=TCP SPT=59857 DPT=6380 WINDOW=1024 RES=0x00 SYN URGP=0

Apr  6 01:06:07 pornomens sshd\[8700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.4.70.106  user=root
Apr  6 01:06:10 pornomens sshd\[8700\]: Failed password for root from 223.4.70.106 port 37750 ssh2
Apr  6 01:26:24 pornomens sshd\[8853\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=223.4.70.106  user=root
...

$f2bV_matches

Apr  5 23:38:29 [HOSTNAME] sshd[28612]: User **removed** from 82.238.107.124 not allowed because not listed in AllowUsers
Apr  5 23:38:29 [HOSTNAME] sshd[28612]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.238.107.124  user=**removed**
Apr  5 23:38:31 [HOSTNAME] sshd[28612]: Failed password for invalid user **removed** from 82.238.107.124 port 37688 ssh2
...

[2020-04-05 17:38:29] NOTICE[12114] chan_sip.c: Registration from '"29773" ' failed for '103.145.12.17:5810' - Wrong password
[2020-04-05 17:38:29] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-05T17:38:29.878-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="29773",SessionID="0x7f020c0db748",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/103.145.12.17/5810",Challenge="16c4239a",ReceivedChallenge="16c4239a",ReceivedHash="750f327d3e7a4f14cbd7a76648c893cd"
[2020-04-05 17:38:29] NOTICE[12114] chan_sip.c: Registration from '"29773" ' failed for '103.145.12.17:5810' - Wrong password
[2020-04-05 17:38:29] SECURITY[12128] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-04-05T17:38:29.970-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="29773",SessionID="0x7f020c088288",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="I
...

SSH Brute-Forcing (server2)

2020-04-06T00:42:43.719167librenms sshd[8778]: Failed password for root from 51.38.188.101 port 34782 ssh2
2020-04-06T00:46:36.726500librenms sshd[9381]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=101.ip-51-38-188.eu  user=root
2020-04-06T00:46:39.123643librenms sshd[9381]: Failed password for root from 51.38.188.101 port 45828 ssh2
...

" "

SASL PLAIN auth failed: ruser=...

2020-04-05T21:42:42.853566ionos.janbro.de sshd[60538]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.188.141.111  user=root
2020-04-05T21:42:44.554558ionos.janbro.de sshd[60538]: Failed password for root from 190.188.141.111 port 43986 ssh2
2020-04-05T21:47:27.685773ionos.janbro.de sshd[60560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.188.141.111  user=root
2020-04-05T21:47:29.510938ionos.janbro.de sshd[60560]: Failed password for root from 190.188.141.111 port 55022 ssh2
2020-04-05T21:52:16.049921ionos.janbro.de sshd[60573]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.188.141.111  user=root
2020-04-05T21:52:17.885642ionos.janbro.de sshd[60573]: Failed password for root from 190.188.141.111 port 37828 ssh2
2020-04-05T21:57:12.826899ionos.janbro.de sshd[60597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rh
...

Apr  6 00:33:20 pkdns2 sshd\[40638\]: Failed password for root from 106.13.9.7 port 54250 ssh2Apr  6 00:36:39 pkdns2 sshd\[40835\]: Failed password for root from 106.13.9.7 port 53050 ssh2Apr  6 00:37:06 pkdns2 sshd\[40863\]: Failed password for root from 106.13.9.7 port 58450 ssh2Apr  6 00:37:33 pkdns2 sshd\[40880\]: Failed password for root from 106.13.9.7 port 35618 ssh2Apr  6 00:37:59 pkdns2 sshd\[40891\]: Failed password for root from 106.13.9.7 port 41018 ssh2Apr  6 00:38:26 pkdns2 sshd\[40924\]: Failed password for root from 106.13.9.7 port 46414 ssh2
...

Apr  6 01:25:32 localhost sshd\[5090\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.95.16  user=root
Apr  6 01:25:34 localhost sshd\[5090\]: Failed password for root from 217.182.95.16 port 47588 ssh2
Apr  6 01:29:23 localhost sshd\[5182\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.95.16  user=root
Apr  6 01:29:25 localhost sshd\[5182\]: Failed password for root from 217.182.95.16 port 52800 ssh2
Apr  6 01:33:25 localhost sshd\[5429\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=217.182.95.16  user=root
...

/GponForm/diag_Form%3Fimages/

Troll, looking for /Guestbook.php - /jax_guestbook.php & similar

2020-04-06T01:39:42.419701librenms sshd[15856]: Failed password for root from 218.92.0.212 port 58717 ssh2
2020-04-06T01:39:46.178564librenms sshd[15856]: Failed password for root from 218.92.0.212 port 58717 ssh2
2020-04-06T01:39:48.819580librenms sshd[15856]: Failed password for root from 218.92.0.212 port 58717 ssh2
...