Jun  3 07:54:22 localhost sshd\[20147\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.27.254  user=root
Jun  3 07:54:24 localhost sshd\[20147\]: Failed password for root from 49.232.27.254 port 36340 ssh2
Jun  3 07:58:48 localhost sshd\[20433\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.27.254  user=root
Jun  3 07:58:51 localhost sshd\[20433\]: Failed password for root from 49.232.27.254 port 55940 ssh2
Jun  3 08:03:14 localhost sshd\[20724\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.27.254  user=root
...

Jun  3 07:52:56 debian-2gb-nbg1-2 kernel: \[13422340.118112\] \[UFW BLOCK\] IN=eth0 OUT= MAC=96:00:00:0e:18:f4:d2:74:7f:6e:37:e3:08:00 SRC=45.134.179.57 DST=195.201.40.59 LEN=40 TOS=0x00 PREC=0x00 TTL=246 ID=56043 PROTO=TCP SPT=55256 DPT=65119 WINDOW=1024 RES=0x00 SYN URGP=0

This message is from a trusted sender.
Third Reminder
We remind you the third time,

you must answer us to avoid receiving this message several times.

Do you want to unsubscribe?

YES NO

Jun  3 08:34:08 pkdns2 sshd\[49780\]: Failed password for root from 49.88.112.60 port 57768 ssh2Jun  3 08:34:11 pkdns2 sshd\[49780\]: Failed password for root from 49.88.112.60 port 57768 ssh2Jun  3 08:34:13 pkdns2 sshd\[49780\]: Failed password for root from 49.88.112.60 port 57768 ssh2Jun  3 08:35:05 pkdns2 sshd\[49823\]: Failed password for root from 49.88.112.60 port 26902 ssh2Jun  3 08:35:08 pkdns2 sshd\[49823\]: Failed password for root from 49.88.112.60 port 26902 ssh2Jun  3 08:35:10 pkdns2 sshd\[49823\]: Failed password for root from 49.88.112.60 port 26902 ssh2
...

Jun  3 10:48:08 itv-usvr-01 sshd[12797]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.175.63  user=root
Jun  3 10:48:10 itv-usvr-01 sshd[12797]: Failed password for root from 104.42.175.63 port 40196 ssh2
Jun  3 10:53:36 itv-usvr-01 sshd[13031]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.175.63  user=root
Jun  3 10:53:38 itv-usvr-01 sshd[13031]: Failed password for root from 104.42.175.63 port 41556 ssh2
Jun  3 10:57:00 itv-usvr-01 sshd[13164]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.42.175.63  user=root
Jun  3 10:57:02 itv-usvr-01 sshd[13164]: Failed password for root from 104.42.175.63 port 47968 ssh2

Cowrie Honeypot: 10 unauthorised SSH/Telnet login attempts between 2020-06-03T06:10:08Z and 2020-06-03T06:17:43Z

Jun  3 01:43:25 ny01 sshd[12547]: Failed password for root from 192.81.208.44 port 54857 ssh2
Jun  3 01:46:23 ny01 sshd[12902]: Failed password for root from 192.81.208.44 port 51766 ssh2

Jun  3 05:51:35 server sshd[8946]: Failed password for root from 110.16.76.213 port 33298 ssh2
Jun  3 05:53:57 server sshd[10686]: Failed password for root from 110.16.76.213 port 50868 ssh2
Jun  3 05:56:15 server sshd[12646]: Failed password for root from 110.16.76.213 port 4474 ssh2

Unauthorised connection attempt detected at AUO MAIN. System is sshd. Protected by AUO Stack Web Application Firewall (WAF)

06/02/2020-23:56:04.927379 173.249.43.87 Protocol: 17 ET SCAN Sipvicious User-Agent Detected (friendly-scanner)

Unauthorised access (Jun  3) SRC=46.235.249.87 LEN=52 PREC=0x20 TTL=56 ID=16733 DF TCP DPT=445 WINDOW=8192 SYN

Jun  3 08:02:30 vmi345603 sshd[30307]: Failed password for root from 222.186.175.217 port 6884 ssh2
Jun  3 08:02:34 vmi345603 sshd[30307]: Failed password for root from 222.186.175.217 port 6884 ssh2
...

Jun  3 07:45:14 legacy sshd[30680]: Failed password for root from 222.186.175.216 port 12664 ssh2
Jun  3 07:45:28 legacy sshd[30680]: error: maximum authentication attempts exceeded for root from 222.186.175.216 port 12664 ssh2 [preauth]
Jun  3 07:45:35 legacy sshd[30684]: Failed password for root from 222.186.175.216 port 31030 ssh2
...

(imapd) Failed IMAP login from 171.103.150.86 (TH/Thailand/171-103-150-86.static.asianet.co.th): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun  3 08:26:51 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 5 secs): user=, method=PLAIN, rip=171.103.150.86, lip=5.63.12.44, session=

Tried sshing with brute force.