firewall-block, port(s): 8734/tcp, 8757/tcp, 8796/tcp, 8828/tcp, 8839/tcp, 9060/tcp, 9220/tcp, 9258/tcp, 9386/tcp, 9433/tcp

Jun  2 05:55:08 h1655903 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 2 secs\): user=\, method=PLAIN, rip=52.178.192.68, lip=85.214.28.7, session=\
Jun  2 05:55:14 h1655903 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=52.178.192.68, lip=85.214.28.7, session=\
Jun  2 05:55:17 h1655903 dovecot: pop3-login: Aborted login \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=52.178.192.68, lip=85.214.28.7, session=\
...

Jun  2 06:51:24  sshd\[2778\]: User root from 152.ip-51-255-168.eu not allowed because not listed in AllowUsersJun  2 06:51:26  sshd\[2778\]: Failed password for invalid user root from 51.255.168.152 port 43229 ssh2
...

Jun  2 00:26:03 ny01 sshd[18367]: Failed password for root from 187.109.21.245 port 54758 ssh2
Jun  2 00:29:11 ny01 sshd[18879]: Failed password for root from 187.109.21.245 port 41978 ssh2

Jun  2 13:11:03 web1 sshd[21098]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.142.180  user=root
Jun  2 13:11:05 web1 sshd[21098]: Failed password for root from 59.36.142.180 port 41169 ssh2
Jun  2 13:48:19 web1 sshd[30084]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.142.180  user=root
Jun  2 13:48:20 web1 sshd[30084]: Failed password for root from 59.36.142.180 port 49061 ssh2
Jun  2 13:50:53 web1 sshd[30738]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.142.180  user=root
Jun  2 13:50:55 web1 sshd[30738]: Failed password for root from 59.36.142.180 port 59947 ssh2
Jun  2 13:53:08 web1 sshd[31302]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.142.180  user=root
Jun  2 13:53:11 web1 sshd[31302]: Failed password for root from 59.36.142.180 port 42600 ssh2
Jun  2 13:55:26 web1 sshd[31897]: pa
...

trying to access non-authorized port

Jun  2 05:47:26 * sshd[344]: Failed password for root from 129.204.207.104 port 56050 ssh2

"Unauthorized connection attempt on SSHD detected"

*Port Scan* detected from 140.238.153.125 (US/United States/Washington/Seattle (Pike Pine Retail Core)/-). 4 hits in the last 296 seconds

"fail2ban match"

Unauthorized IMAP connection attempt

(smtpauth) Failed SMTP AUTH login from 85.17.27.210 (NL/Netherlands/-): 5 in the last 3600 secs

Jun  2 00:07:36 ny01 sshd[15245]: Failed password for root from 125.124.117.226 port 45554 ssh2
Jun  2 00:11:40 ny01 sshd[16340]: Failed password for root from 125.124.117.226 port 43846 ssh2

Jun  2 06:34:58 vps687878 sshd\[25323\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.30.90  user=root
Jun  2 06:35:00 vps687878 sshd\[25323\]: Failed password for root from 118.89.30.90 port 34166 ssh2
Jun  2 06:37:12 vps687878 sshd\[25700\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.30.90  user=root
Jun  2 06:37:14 vps687878 sshd\[25700\]: Failed password for root from 118.89.30.90 port 58722 ssh2
Jun  2 06:39:28 vps687878 sshd\[25972\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.89.30.90  user=root
...

Jun  2 06:49:46 abendstille sshd\[8814\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183  user=root
Jun  2 06:49:46 abendstille sshd\[8804\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.183  user=root
Jun  2 06:49:48 abendstille sshd\[8814\]: Failed password for root from 222.186.175.183 port 51512 ssh2
Jun  2 06:49:48 abendstille sshd\[8804\]: Failed password for root from 222.186.175.183 port 60674 ssh2
Jun  2 06:49:52 abendstille sshd\[8804\]: Failed password for root from 222.186.175.183 port 60674 ssh2
...