Apr  1 03:59:29 ny01 sshd[364]: Failed password for root from 103.35.64.73 port 33628 ssh2
Apr  1 04:01:54 ny01 sshd[638]: Failed password for root from 103.35.64.73 port 46602 ssh2

Apr  1 10:55:53 itv-usvr-02 sshd[22003]: Invalid user ih from 128.199.162.2 port 43196
Apr  1 10:55:53 itv-usvr-02 sshd[22003]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.162.2
Apr  1 10:55:53 itv-usvr-02 sshd[22003]: Invalid user ih from 128.199.162.2 port 43196
Apr  1 10:55:55 itv-usvr-02 sshd[22003]: Failed password for invalid user ih from 128.199.162.2 port 43196 ssh2
Apr  1 11:01:45 itv-usvr-02 sshd[22188]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=128.199.162.2  user=root
Apr  1 11:01:46 itv-usvr-02 sshd[22188]: Failed password for root from 128.199.162.2 port 48924 ssh2

(sshd) Failed SSH login from 222.186.30.167 (CN/China/-): 5 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_SSHD; Logs: Apr  1 09:35:54 amsweb01 sshd[20950]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167  user=root
Apr  1 09:35:55 amsweb01 sshd[20950]: Failed password for root from 222.186.30.167 port 47104 ssh2
Apr  1 09:35:58 amsweb01 sshd[20950]: Failed password for root from 222.186.30.167 port 47104 ssh2
Apr  1 09:36:00 amsweb01 sshd[20950]: Failed password for root from 222.186.30.167 port 47104 ssh2
Apr  1 10:24:44 amsweb01 sshd[26129]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.30.167  user=root

(ftpd) Failed FTP login from 116.2.18.182 (CN/China/-): 10 in the last 3600 secs

Apr  1 07:09:34 marvibiene sshd[14527]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.8.38  user=root
Apr  1 07:09:36 marvibiene sshd[14527]: Failed password for root from 213.6.8.38 port 58421 ssh2
Apr  1 07:15:46 marvibiene sshd[14582]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=213.6.8.38  user=root
Apr  1 07:15:48 marvibiene sshd[14582]: Failed password for root from 213.6.8.38 port 42442 ssh2
...

Apr  1 09:55:00 localhost sshd\[25663\]: Invalid user test from 189.69.116.172
Apr  1 09:55:00 localhost sshd\[25663\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.69.116.172
Apr  1 09:55:02 localhost sshd\[25663\]: Failed password for invalid user test from 189.69.116.172 port 52086 ssh2
Apr  1 10:00:24 localhost sshd\[26266\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=189.69.116.172  user=root
Apr  1 10:00:25 localhost sshd\[26266\]: Failed password for root from 189.69.116.172 port 54815 ssh2
...

Wed Apr  1 06:01:23 2020 \[pid 28345\] \[anonymous\] FAIL LOGIN: Client "222.182.118.116"
Wed Apr  1 06:01:27 2020 \[pid 28347\] \[www\] FAIL LOGIN: Client "222.182.118.116"
Wed Apr  1 06:01:32 2020 \[pid 28351\] \[www\] FAIL LOGIN: Client "222.182.118.116"
Wed Apr  1 06:01:36 2020 \[pid 28353\] \[www\] FAIL LOGIN: Client "222.182.118.116"
Wed Apr  1 06:01:40 2020 \[pid 28389\] \[www\] FAIL LOGIN: Client "222.182.118.116"

$f2bV_matches

2020-03-31 22:51:32 H=(K2V0uNwE6) [60.167.117.45]:50540 I=[192.147.25.65]:25 F= rejected RCPT <3194630600@qq.com>: Sender verify failed
2020-03-31 22:51:40 dovecot_login authenticator failed for (8PxMkZZCo) [60.167.117.45]:51368 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=pcousins@lerctr.org)
2020-03-31 22:51:47 dovecot_login authenticator failed for (uDgkTWpTQv) [60.167.117.45]:53344 I=[192.147.25.65]:25: 535 Incorrect authentication data (set_id=pcousins@lerctr.org)
...

Mar 31 19:32:06 server sshd\[1533\]: Failed password for root from 152.136.218.35 port 52932 ssh2
Apr  1 10:47:33 server sshd\[1259\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.218.35  user=root
Apr  1 10:47:35 server sshd\[1259\]: Failed password for root from 152.136.218.35 port 55904 ssh2
Apr  1 10:55:29 server sshd\[3260\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=152.136.218.35  user=root
Apr  1 10:55:31 server sshd\[3260\]: Failed password for root from 152.136.218.35 port 52624 ssh2
...

Invalid user zhanglei from 51.254.127.231 port 54924

Apr  1 08:35:55 odroid64 sshd\[18000\]: User root from 64.225.60.206 not allowed because not listed in AllowUsers
Apr  1 08:35:55 odroid64 sshd\[18000\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=64.225.60.206  user=root
...

2020-04-01T05:54:21.841142ionos.janbro.de sshd[27522]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.150.72.28  user=root
2020-04-01T05:54:23.512647ionos.janbro.de sshd[27522]: Failed password for root from 170.150.72.28 port 33182 ssh2
2020-04-01T05:57:20.285753ionos.janbro.de sshd[27547]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.150.72.28  user=root
2020-04-01T05:57:21.856997ionos.janbro.de sshd[27547]: Failed password for root from 170.150.72.28 port 47048 ssh2
2020-04-01T06:00:08.293042ionos.janbro.de sshd[27576]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.150.72.28  user=root
2020-04-01T06:00:09.923517ionos.janbro.de sshd[27576]: Failed password for root from 170.150.72.28 port 60916 ssh2
2020-04-01T06:03:05.550332ionos.janbro.de sshd[27597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=170.150.
...

Apr  1 09:53:33 host sshd[23073]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=109.87.115.220  user=root
Apr  1 09:53:35 host sshd[23073]: Failed password for root from 109.87.115.220 port 57870 ssh2
...

Brute force SMTP login attempted.
...