Oct 12 21:27:54 friendsofhawaii sshd\[606\]: Invalid user Haslo12\# from 152.136.192.187
Oct 12 21:27:54 friendsofhawaii sshd\[606\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.192.187
Oct 12 21:27:56 friendsofhawaii sshd\[606\]: Failed password for invalid user Haslo12\# from 152.136.192.187 port 58796 ssh2
Oct 12 21:33:49 friendsofhawaii sshd\[1066\]: Invalid user Haslo-123 from 152.136.192.187
Oct 12 21:33:49 friendsofhawaii sshd\[1066\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.192.187

Oct 13 09:12:28 SilenceServices sshd[31005]: Failed password for root from 54.38.33.186 port 34042 ssh2
Oct 13 09:15:58 SilenceServices sshd[31926]: Failed password for root from 54.38.33.186 port 45626 ssh2

Oct 13 03:33:27 web1 postfix/smtpd[19126]: warning: unknown[78.128.113.117]: SASL PLAIN authentication failed: authentication failure
...

Oct 13 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=125.32.1.146, lip=**REMOVED**, TLS: Disconnected, session=\
Oct 13 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 7 secs\): user=\, method=PLAIN, rip=125.32.1.146, lip=**REMOVED**, TLS: Disconnected, session=\<1fuMAMKUtrt9IAGS\>
Oct 13 **REMOVED** dovecot: imap-login: Disconnected \(auth failed, 1 attempts in 6 secs\): user=\, method=PLAIN, rip=125.32.1.146, lip=**REMOVED**, TLS: Disconnected, session=\

Oct 13 05:50:32 dev0-dcde-rnet sshd[30570]: Failed password for root from 218.92.0.161 port 41582 ssh2
Oct 13 05:50:45 dev0-dcde-rnet sshd[30570]: error: maximum authentication attempts exceeded for root from 218.92.0.161 port 41582 ssh2 [preauth]
Oct 13 05:50:52 dev0-dcde-rnet sshd[30572]: Failed password for root from 218.92.0.161 port 1397 ssh2

Unauthorized connection attempt from IP address 14.116.207.212 on Port 445(SMB)

Oct 13 06:12:31 localhost sshd\[15719\]: Invalid user R00T@1234 from 178.128.156.159 port 58934
Oct 13 06:12:31 localhost sshd\[15719\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.128.156.159
Oct 13 06:12:33 localhost sshd\[15719\]: Failed password for invalid user R00T@1234 from 178.128.156.159 port 58934 ssh2

2019-10-13T14:20:36.509115enmeeting.mahidol.ac.th sshd\[26129\]: User root from 178.62.79.227 not allowed because not listed in AllowUsers
2019-10-13T14:20:36.631407enmeeting.mahidol.ac.th sshd\[26129\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=178.62.79.227  user=root
2019-10-13T14:20:38.595741enmeeting.mahidol.ac.th sshd\[26129\]: Failed password for invalid user root from 178.62.79.227 port 43602 ssh2
...

Oct 12 19:14:07 wbs sshd\[6133\]: Invalid user P0O9I8U7Y6 from 106.12.108.90
Oct 12 19:14:07 wbs sshd\[6133\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.90
Oct 12 19:14:10 wbs sshd\[6133\]: Failed password for invalid user P0O9I8U7Y6 from 106.12.108.90 port 46586 ssh2
Oct 12 19:19:59 wbs sshd\[6622\]: Invalid user P0O9I8U7Y6 from 106.12.108.90
Oct 12 19:19:59 wbs sshd\[6622\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.12.108.90

Unauthorised access (Oct 13) SRC=200.76.107.137 LEN=52 TOS=0x12 PREC=0x40 TTL=116 ID=526 DF TCP DPT=445 WINDOW=8192 CWR ECE SYN

Oct 13 09:57:31 jane sshd[13537]: Failed password for root from 51.77.137.211 port 40966 ssh2
...

Oct 12 21:46:32 sachi sshd\[5941\]: Invalid user Par0la!2 from 122.192.33.102
Oct 12 21:46:32 sachi sshd\[5941\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.192.33.102
Oct 12 21:46:34 sachi sshd\[5941\]: Failed password for invalid user Par0la!2 from 122.192.33.102 port 60230 ssh2
Oct 12 21:51:38 sachi sshd\[6392\]: Invalid user Inter2017 from 122.192.33.102
Oct 12 21:51:38 sachi sshd\[6392\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.192.33.102

Oct 12 21:55:03 auw2 sshd\[13970\]: Invalid user Pa55w0rd@12345 from 58.254.132.156
Oct 12 21:55:03 auw2 sshd\[13970\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.156
Oct 12 21:55:05 auw2 sshd\[13970\]: Failed password for invalid user Pa55w0rd@12345 from 58.254.132.156 port 49236 ssh2
Oct 12 22:00:21 auw2 sshd\[14506\]: Invalid user Root1qaz2wsx from 58.254.132.156
Oct 12 22:00:21 auw2 sshd\[14506\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=58.254.132.156

Oct 13 07:07:19 www sshd\[122862\]: Invalid user Q2w3e4r5t6 from 186.5.109.211
Oct 13 07:07:19 www sshd\[122862\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=186.5.109.211
Oct 13 07:07:21 www sshd\[122862\]: Failed password for invalid user Q2w3e4r5t6 from 186.5.109.211 port 29543 ssh2
...

Oct  7 19:04:37 hostnameis sshd[42092]: reveeclipse mapping checking getaddrinfo for ecs-114-115-240-97.compute.hwclouds-dns.com [114.115.240.97] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  7 19:04:37 hostnameis sshd[42092]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.115.240.97  user=r.r
Oct  7 19:04:39 hostnameis sshd[42092]: Failed password for r.r from 114.115.240.97 port 40436 ssh2
Oct  7 19:04:40 hostnameis sshd[42092]: Received disconnect from 114.115.240.97: 11: Bye Bye [preauth]
Oct  7 19:13:07 hostnameis sshd[42162]: reveeclipse mapping checking getaddrinfo for ecs-114-115-240-97.compute.hwclouds-dns.com [114.115.240.97] failed - POSSIBLE BREAK-IN ATTEMPT!
Oct  7 19:13:07 hostnameis sshd[42162]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=114.115.240.97  user=r.r
Oct  7 19:13:09 hostnameis sshd[42162]: Failed password for r.r from 114.115.240.97 port 34372 ssh2
Oct  7 19:13........
------------------------------