Aug719:31:32server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=151.34.70.57\,lip=136.243.224.50\,TLS\,session=\Aug719:31:32server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=151.34.70.57\,lip=136.243.224.50\,TLS\,session=\Aug719:31:34server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=151.34.70.57\,lip=136.243.224.50\,TLS\,session=\<2I7vT4qPb7yXIkY5\>Aug719:31:34server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=151.34.70.57\,lip=136.243.224.50\,TLS\,session=\<6I7vT4qPcLyXIkY5\>Aug719:31:36server2dovecot:imap-login:Abortedlogin\(authfailed\,1attemptsin2secs\):user=\\,method=PLAIN\,rip=151.34.70.57\,lip=136.243.224.50\,TLS\,session=\Aug719:31:36server2dovecot:imap-login:Abortedlogi

Aug  7 20:14:33 animalibera sshd[3665]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.72  user=root
Aug  7 20:14:35 animalibera sshd[3665]: Failed password for root from 112.85.42.72 port 49777 ssh2
...

Aug  8 03:27:02 hosting sshd[1378]: Invalid user 12345678 from 51.75.27.195 port 55138
...

Aug  7 23:27:21 meumeu sshd[9900]: Failed password for invalid user ts from 116.203.76.46 port 56182 ssh2
Aug  7 23:31:17 meumeu sshd[10353]: Failed password for invalid user git from 116.203.76.46 port 50652 ssh2
Aug  7 23:35:24 meumeu sshd[10802]: Failed password for invalid user mailbox from 116.203.76.46 port 44908 ssh2
...

Aug  8 02:16:58 arianus sshd\[22298\]: Unable to negotiate with 222.186.15.110 port 39998: no matching key exchange method found. Their offer: diffie-hellman-group14-sha1,diffie-hellman-group-exchange-sha1,diffie-hellman-group1-sha1 \[preauth\]
...

Aug  6 05:27:02 server6 sshd[13074]: Address 41.204.161.161 maps to oris.nacosti.go.ke, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Aug  6 05:27:02 server6 sshd[13074]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=41.204.161.161  user=r.r
Aug  6 05:27:04 server6 sshd[13074]: Failed password for r.r from 41.204.161.161 port 34734 ssh2
Aug  6 05:27:04 server6 sshd[13074]: Received disconnect from 41.204.161.161: 11: Bye Bye [preauth]
Aug  6 06:35:47 server6 sshd[9996]: Address 41.204.161.161 maps to oris.nacosti.go.ke, but this does not map back to the address - POSSIBLE BREAK-IN ATTEMPT!
Aug  6 06:35:48 server6 sshd[9996]: Failed password for invalid user userftp from 41.204.161.161 port 60910 ssh2
Aug  6 06:35:49 server6 sshd[9996]: Received disconnect from 41.204.161.161: 11: Bye Bye [preauth]
Aug  6 06:40:46 server6 sshd[14323]: Address 41.204.161.161 maps to oris.nacosti.go.ke, but this does not ma........
-------------------------------

Automatic report - Port Scan Attack

Reported by AbuseIPDB proxy server.

Aug  7 21:31:59 vps65 sshd\[19946\]: Invalid user www from 185.247.118.119 port 54522
Aug  7 21:31:59 vps65 sshd\[19946\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=185.247.118.119
...

$f2bV_matches

:

Aug  7 13:26:16 xtremcommunity sshd\[3919\]: Invalid user odbc from 89.46.196.34 port 35752
Aug  7 13:26:16 xtremcommunity sshd\[3919\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.196.34
Aug  7 13:26:19 xtremcommunity sshd\[3919\]: Failed password for invalid user odbc from 89.46.196.34 port 35752 ssh2
Aug  7 13:30:36 xtremcommunity sshd\[4009\]: Invalid user yt from 89.46.196.34 port 57870
Aug  7 13:30:36 xtremcommunity sshd\[4009\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=89.46.196.34
...

19/8/7@13:30:55: FAIL: Alarm-Intrusion address from=77.252.68.106
...

Aug  7 20:31:48 srv-4 sshd\[10046\]: Invalid user test from 82.200.226.226
Aug  7 20:31:48 srv-4 sshd\[10046\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=82.200.226.226
Aug  7 20:31:51 srv-4 sshd\[10046\]: Failed password for invalid user test from 82.200.226.226 port 58472 ssh2
...

Aug  8 01:43:17 www sshd\[8453\]: Invalid user rtorrent from 121.160.198.194 port 42064
...