Jun  3 05:43:57 vmd17057 sshd[20864]: Failed password for root from 83.103.59.192 port 54194 ssh2
...

Unauthorized connection attempt from IP address 36.65.169.113 on Port 445(SMB)

Unauthorized access or intrusion attempt detected from Thor banned IP

Jun  3 04:36:07 localhost sshd\[24008\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.91.176  user=root
Jun  3 04:36:10 localhost sshd\[24008\]: Failed password for root from 120.92.91.176 port 2488 ssh2
Jun  3 04:40:12 localhost sshd\[24062\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=120.92.91.176  user=root
...

2020-06-02 22:39:50.742247-0500  localhost smtpd[49912]: NOQUEUE: reject: RCPT from unknown[63.83.73.22]: 554 5.7.1 Service unavailable; Client host [63.83.73.22] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=

Jun  3 02:21:24 mockhub sshd[15634]: Failed password for root from 154.83.17.149 port 43534 ssh2
...

Jun  3 12:53:10 [host] sshd[26030]: pam_unix(sshd:
Jun  3 12:53:12 [host] sshd[26030]: Failed passwor
Jun  3 12:57:21 [host] sshd[26191]: pam_unix(sshd:

Jun  3 13:31:28 vps639187 sshd\[19676\]: Invalid user muramatsu from 51.91.156.5 port 51022
Jun  3 13:31:28 vps639187 sshd\[19676\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=51.91.156.5
Jun  3 13:31:30 vps639187 sshd\[19676\]: Failed password for invalid user muramatsu from 51.91.156.5 port 51022 ssh2
...

2020-06-03T08:42:57.674811centos sshd[30432]: Failed password for root from 49.232.148.100 port 39942 ssh2
2020-06-03T08:44:45.413266centos sshd[30552]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=49.232.148.100  user=root
2020-06-03T08:44:47.103120centos sshd[30552]: Failed password for root from 49.232.148.100 port 58774 ssh2
...

SSH Brute Force

port 23

Lines containing failures of 104.223.143.205 (max 1000)
Jun  1 20:25:13 localhost sshd[27629]: User r.r from 104.223.143.205 not allowed because listed in DenyUsers
Jun  1 20:25:13 localhost sshd[27629]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.223.143.205  user=r.r
Jun  1 20:25:15 localhost sshd[27629]: Failed password for invalid user r.r from 104.223.143.205 port 45864 ssh2
Jun  1 20:25:17 localhost sshd[27629]: Received disconnect from 104.223.143.205 port 45864:11: Bye Bye [preauth]
Jun  1 20:25:17 localhost sshd[27629]: Disconnected from invalid user r.r 104.223.143.205 port 45864 [preauth]
Jun  1 21:04:25 localhost sshd[4660]: User r.r from 104.223.143.205 not allowed because listed in DenyUsers
Jun  1 21:04:25 localhost sshd[4660]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.223.143.205  user=r.r
Jun  1 21:04:27 localhost sshd[4660]: Failed password for invalid user........
------------------------------

Jun  3 16:54:47 dhoomketu sshd[455915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89  user=root
Jun  3 16:54:49 dhoomketu sshd[455915]: Failed password for root from 112.85.42.89 port 17229 ssh2
Jun  3 16:54:47 dhoomketu sshd[455915]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=112.85.42.89  user=root
Jun  3 16:54:49 dhoomketu sshd[455915]: Failed password for root from 112.85.42.89 port 17229 ssh2
Jun  3 16:54:51 dhoomketu sshd[455915]: Failed password for root from 112.85.42.89 port 17229 ssh2
...

Jun  2 21:47:56 Host-KLAX-C sshd[15144]: User root from 137.74.171.160 not allowed because not listed in AllowUsers
...