Mar  4 07:11:41 eventyay sshd[24968]: Failed password for root from 49.88.112.67 port 34876 ssh2
Mar  4 07:12:29 eventyay sshd[24972]: Failed password for root from 49.88.112.67 port 48672 ssh2
Mar  4 07:12:31 eventyay sshd[24972]: Failed password for root from 49.88.112.67 port 48672 ssh2
...

Mar  4 11:32:05 areeb-Workstation sshd[9085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=59.36.161.45 
Mar  4 11:32:08 areeb-Workstation sshd[9085]: Failed password for invalid user mailman from 59.36.161.45 port 60940 ssh2
...

Mar  4 06:15:52 localhost sshd[43030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183  user=root
Mar  4 06:15:54 localhost sshd[43030]: Failed password for root from 222.186.173.183 port 31360 ssh2
Mar  4 06:15:58 localhost sshd[43030]: Failed password for root from 222.186.173.183 port 31360 ssh2
Mar  4 06:15:52 localhost sshd[43030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183  user=root
Mar  4 06:15:54 localhost sshd[43030]: Failed password for root from 222.186.173.183 port 31360 ssh2
Mar  4 06:15:58 localhost sshd[43030]: Failed password for root from 222.186.173.183 port 31360 ssh2
Mar  4 06:15:52 localhost sshd[43030]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.173.183  user=root
Mar  4 06:15:54 localhost sshd[43030]: Failed password for root from 222.186.173.183 port 31360 ssh2
Mar  4 06:15:58 localhost sshd[43
...

2020-03-04T05:34:19.889414shield sshd\[15843\]: Invalid user em from 213.178.155.20 port 44116
2020-03-04T05:34:19.896985shield sshd\[15843\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.178.155.20
2020-03-04T05:34:21.516552shield sshd\[15843\]: Failed password for invalid user em from 213.178.155.20 port 44116 ssh2
2020-03-04T05:42:56.229815shield sshd\[17091\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.178.155.20  user=root
2020-03-04T05:42:58.155709shield sshd\[17091\]: Failed password for root from 213.178.155.20 port 50346 ssh2

SSH login attempts.

MultiHost/MultiPort Probe, Scan, Hack -

2020-03-04T01:34:28.316045vps773228.ovh.net sshd[10496]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.180.41  user=root
2020-03-04T01:34:29.751628vps773228.ovh.net sshd[10496]: Failed password for root from 222.186.180.41 port 9344 ssh2
2020-03-04T01:34:33.019401vps773228.ovh.net sshd[10496]: Failed password for root from 222.186.180.41 port 9344 ssh2
2020-03-04T01:34:35.837851vps773228.ovh.net sshd[10496]: Failed password for root from 222.186.180.41 port 9344 ssh2
2020-03-04T01:34:39.734995vps773228.ovh.net sshd[10496]: Failed password for root from 222.186.180.41 port 9344 ssh2
2020-03-04T01:34:43.320245vps773228.ovh.net sshd[10496]: Failed password for root from 222.186.180.41 port 9344 ssh2
2020-03-04T01:34:43.331395vps773228.ovh.net sshd[10496]: error: maximum authentication attempts exceeded for root from 222.186.180.41 port 9344 ssh2 [preauth]
2020-03-04T01:34:28.316045vps773228.ovh.net sshd[10496]: pam_unix(sshd:auth): authent
...

MultiHost/MultiPort Probe, Scan, Hack -

Brute forcing RDP port 3389

(sshd) Failed SSH login from 43.225.151.252 (BD/Bangladesh/-): 3 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar  4 04:32:40 andromeda sshd[17476]: Invalid user sammy from 43.225.151.252 port 59000
Mar  4 04:32:42 andromeda sshd[17476]: Failed password for invalid user sammy from 43.225.151.252 port 59000 ssh2
Mar  4 05:01:06 andromeda sshd[18470]: Invalid user oracle from 43.225.151.252 port 42532

Mar  4 05:59:55 grey postfix/smtpd\[8561\]: NOQUEUE: reject: RCPT from unknown\[123.11.215.90\]: 554 5.7.1 Service unavailable\; Client host \[123.11.215.90\] blocked using truncate.gbudb.net\; http://www.gbudb.com/truncate/ \[123.11.215.90\]\; from=\ to=\ proto=ESMTP helo=\
...

(sshd) Failed SSH login from 122.224.217.46 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Mar  4 05:48:15 amsweb01 sshd[3417]: User mysql from 122.224.217.46 not allowed because not listed in AllowUsers
Mar  4 05:48:15 amsweb01 sshd[3417]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.224.217.46  user=mysql
Mar  4 05:48:16 amsweb01 sshd[3417]: Failed password for invalid user mysql from 122.224.217.46 port 50044 ssh2
Mar  4 05:59:20 amsweb01 sshd[4683]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.224.217.46  user=root
Mar  4 05:59:21 amsweb01 sshd[4683]: Failed password for root from 122.224.217.46 port 39466 ssh2

Mar  4 05:24:41 ns382633 sshd\[1813\]: Invalid user f1 from 156.96.148.242 port 36064
Mar  4 05:24:41 ns382633 sshd\[1813\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.96.148.242
Mar  4 05:24:44 ns382633 sshd\[1813\]: Failed password for invalid user f1 from 156.96.148.242 port 36064 ssh2
Mar  4 05:59:12 ns382633 sshd\[8236\]: Invalid user tml from 156.96.148.242 port 41402
Mar  4 05:59:12 ns382633 sshd\[8236\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=156.96.148.242

Mar  4 07:05:01 jane sshd[379]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.77.148.77 
Mar  4 07:05:03 jane sshd[379]: Failed password for invalid user mysql from 51.77.148.77 port 55120 ssh2
...

Mar  4 06:51:09 vpn01 sshd[29418]: Failed password for root from 118.232.56.156 port 59810 ssh2
Mar  4 06:59:43 vpn01 sshd[29636]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=118.232.56.156
...