Jun 27 14:45:45 Host-KLAX-C dovecot: imap-login: Disconnected (auth failed, 1 attempts in 2 secs): user=, method=PLAIN, rip=2001:e68:5051:53d3:12be:f5ff:fe29:d018, lip=2a04:bdc7:100:28::2, TLS, session=<8BDR6BapSoEgAQ5oUFFT0xK+9f/+KdAY>
...

Dec 19 07:16:44 vtv3 sshd[4705]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.84.6.86 
Dec 19 07:16:46 vtv3 sshd[4705]: Failed password for invalid user cups from 171.84.6.86 port 60074 ssh2
Dec 19 07:23:37 vtv3 sshd[7727]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.84.6.86 
Dec 19 07:35:32 vtv3 sshd[13895]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.84.6.86 
Dec 19 07:35:34 vtv3 sshd[13895]: Failed password for invalid user rpc from 171.84.6.86 port 48878 ssh2
Dec 19 07:41:36 vtv3 sshd[16593]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.84.6.86 
Dec 19 07:53:44 vtv3 sshd[22062]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=171.84.6.86 
Dec 19 07:53:46 vtv3 sshd[22062]: Failed password for invalid user ment508 from 171.84.6.86 port 36076 ssh2
Dec 19 08:00:03 vtv3 sshd[24928]: F

Dec 19 06:23:10 localhost sshd\[19626\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.117  user=mysql
Dec 19 06:23:12 localhost sshd\[19626\]: Failed password for mysql from 106.13.112.117 port 35446 ssh2
Dec 19 06:29:51 localhost sshd\[19864\]: Invalid user shown from 106.13.112.117 port 33424
Dec 19 06:29:51 localhost sshd\[19864\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.13.112.117
Dec 19 06:29:53 localhost sshd\[19864\]: Failed password for invalid user shown from 106.13.112.117 port 33424 ssh2
...

Dec 19 08:15:33 localhost sshd\[7644\]: Invalid user hermoye from 159.65.171.113 port 38710
Dec 19 08:15:33 localhost sshd\[7644\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=159.65.171.113
Dec 19 08:15:35 localhost sshd\[7644\]: Failed password for invalid user hermoye from 159.65.171.113 port 38710 ssh2

SSH Brute-Force reported by Fail2Ban

Dec 18 21:10:17 php1 sshd\[24695\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.221.198.110  user=root
Dec 18 21:10:19 php1 sshd\[24695\]: Failed password for root from 37.221.198.110 port 47878 ssh2
Dec 18 21:17:39 php1 sshd\[25407\]: Invalid user liebner from 37.221.198.110
Dec 18 21:17:39 php1 sshd\[25407\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=37.221.198.110
Dec 18 21:17:41 php1 sshd\[25407\]: Failed password for invalid user liebner from 37.221.198.110 port 54500 ssh2

Dec 19 07:54:10 MK-Soft-VM8 sshd[24953]: Failed password for root from 222.186.173.183 port 24484 ssh2
Dec 19 07:54:14 MK-Soft-VM8 sshd[24953]: Failed password for root from 222.186.173.183 port 24484 ssh2
...

Dec 19 07:24:46 vserver sshd\[22839\]: Invalid user specialk from 185.153.208.26Dec 19 07:24:48 vserver sshd\[22839\]: Failed password for invalid user specialk from 185.153.208.26 port 41186 ssh2Dec 19 07:29:36 vserver sshd\[22879\]: Invalid user coradazzi from 185.153.208.26Dec 19 07:29:38 vserver sshd\[22879\]: Failed password for invalid user coradazzi from 185.153.208.26 port 35506 ssh2
...

Dec 19 07:58:11 dev0-dcde-rnet sshd[26280]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.11.213
Dec 19 07:58:13 dev0-dcde-rnet sshd[26280]: Failed password for invalid user ts3bot from 46.101.11.213 port 42654 ssh2
Dec 19 08:03:23 dev0-dcde-rnet sshd[26320]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.11.213

209.126.99.4 was recorded 5 times by 5 hosts attempting to connect to the following ports: 3702. Incident counter (4h, 24h, all-time): 5, 33, 196

1576736955 - 12/19/2019 07:29:15 Host: 14.177.66.82/14.177.66.82 Port: 445 TCP Blocked

Brute force SMTP login attempts.

Dec 19 07:19:27 vserver sshd\[22806\]: Invalid user hung from 181.48.29.35Dec 19 07:19:30 vserver sshd\[22806\]: Failed password for invalid user hung from 181.48.29.35 port 53828 ssh2Dec 19 07:29:00 vserver sshd\[22866\]: Invalid user bouncer from 181.48.29.35Dec 19 07:29:01 vserver sshd\[22866\]: Failed password for invalid user bouncer from 181.48.29.35 port 34143 ssh2
...

Dec 18 21:04:07 web9 sshd\[621\]: Invalid user thavone from 49.51.132.82
Dec 18 21:04:07 web9 sshd\[621\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.132.82
Dec 18 21:04:10 web9 sshd\[621\]: Failed password for invalid user thavone from 49.51.132.82 port 45246 ssh2
Dec 18 21:09:14 web9 sshd\[1464\]: Invalid user whitehead from 49.51.132.82
Dec 18 21:09:14 web9 sshd\[1464\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.51.132.82

Dec 19 06:29:39 sshgateway sshd\[19267\]: Invalid user nadereh from 178.201.232.214
Dec 19 06:29:39 sshgateway sshd\[19267\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=ip-178-201-232-214.hsi08.unitymediagroup.de
Dec 19 06:29:41 sshgateway sshd\[19267\]: Failed password for invalid user nadereh from 178.201.232.214 port 49496 ssh2

SSH Brute-Force reported by Fail2Ban