Jun  3 12:55:07 vmd17057 sshd[12846]: Failed password for root from 181.129.165.139 port 43258 ssh2
...

Jun  3 07:03:03 NPSTNNYC01T sshd[10143]: Failed password for root from 167.172.133.221 port 42224 ssh2
Jun  3 07:07:57 NPSTNNYC01T sshd[10609]: Failed password for root from 167.172.133.221 port 46552 ssh2
...

Jun  3 06:54:24 ws26vmsma01 sshd[111004]: Failed password for root from 122.51.37.26 port 47518 ssh2
...

Jun  3 11:47:22 our-server-hostname postfix/smtpd[17909]: connect from unknown[173.228.57.78]
Jun x@x
Jun x@x
Jun  3 11:47:25 our-server-hostname postfix/smtpd[17909]: lost connection after RCPT from unknown[173.228.57.78]
Jun  3 11:47:25 our-server-hostname postfix/smtpd[17909]: disconnect from unknown[173.228.57.78]
Jun  3 13:24:16 our-server-hostname postfix/smtpd[12447]: connect from unknown[173.228.57.78]
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x
Jun x@x


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=173.228.57.78

2020-06-02 UTC: (53x) - root(53x)

Jun  3 12:34:24 PorscheCustomer sshd[32495]: Failed password for root from 77.159.249.91 port 46019 ssh2
Jun  3 12:37:36 PorscheCustomer sshd[32667]: Failed password for root from 77.159.249.91 port 36437 ssh2
...

Jun  3 12:48:45 abendstille sshd\[27547\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.24.188.130  user=root
Jun  3 12:48:47 abendstille sshd\[27547\]: Failed password for root from 123.24.188.130 port 40540 ssh2
Jun  3 12:52:56 abendstille sshd\[31515\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.24.188.130  user=root
Jun  3 12:52:58 abendstille sshd\[31515\]: Failed password for root from 123.24.188.130 port 46884 ssh2
Jun  3 12:57:05 abendstille sshd\[2957\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=123.24.188.130  user=root
...

Jun  2 01:47:04 cumulus sshd[5193]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.34.253.184  user=r.r
Jun  2 01:47:06 cumulus sshd[5193]: Failed password for r.r from 187.34.253.184 port 52106 ssh2
Jun  2 01:47:07 cumulus sshd[5193]: Received disconnect from 187.34.253.184 port 52106:11: Bye Bye [preauth]
Jun  2 01:47:07 cumulus sshd[5193]: Disconnected from 187.34.253.184 port 52106 [preauth]
Jun  2 01:56:16 cumulus sshd[5944]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=187.34.253.184  user=r.r
Jun  2 01:56:18 cumulus sshd[5944]: Failed password for r.r from 187.34.253.184 port 34052 ssh2
Jun  2 01:56:18 cumulus sshd[5944]: Received disconnect from 187.34.253.184 port 34052:11: Bye Bye [preauth]
Jun  2 01:56:18 cumulus sshd[5944]: Disconnected from 187.34.253.184 port 34052 [preauth]
Jun  2 01:59:37 cumulus sshd[6263]: pam_unix(sshd:auth): authentication failure; logname= uid=0 ........
-------------------------------

SSH authentication failure x 6 reported by Fail2Ban
...

Jun  3 06:53:42 ajax sshd[15073]: Failed password for root from 199.227.138.238 port 41954 ssh2

Jun  3 05:47:27 mail sshd\[27721\]: Invalid user admin1 from 202.169.224.59
Jun  3 05:47:28 mail sshd\[27721\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=202.169.224.59
Jun  3 05:47:29 mail sshd\[27721\]: Failed password for invalid user admin1 from 202.169.224.59 port 49546 ssh2
...

Jun  3 05:47:01 saturn sshd[332598]: Failed password for root from 139.155.68.58 port 57649 ssh2
Jun  3 05:48:17 saturn sshd[332661]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=139.155.68.58  user=root
Jun  3 05:48:19 saturn sshd[332661]: Failed password for root from 139.155.68.58 port 35448 ssh2
...

Jun  3 12:38:34 [host] sshd[25050]: pam_unix(sshd:
Jun  3 12:38:36 [host] sshd[25050]: Failed passwor
Jun  3 12:42:00 [host] sshd[25561]: pam_unix(sshd:

[2020-06-03 07:05:07] NOTICE[1288] chan_sip.c: Registration from '' failed for '62.171.144.195:37480' - Wrong password
[2020-06-03 07:05:07] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-03T07:05:07.117-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="stefan",SessionID="0x7f4d740397b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.171.144.195/37480",Challenge="53cc4028",ReceivedChallenge="53cc4028",ReceivedHash="9f871d609fbe72717648a587adc67eaf"
[2020-06-03 07:06:27] NOTICE[1288] chan_sip.c: Registration from '' failed for '62.171.144.195:51951' - Wrong password
[2020-06-03 07:06:27] SECURITY[1303] res_security_log.c: SecurityEvent="InvalidPassword",EventTV="2020-06-03T07:06:27.117-0400",Severity="Error",Service="SIP",EventVersion="2",AccountID="bart",SessionID="0x7f4d740397b8",LocalAddress="IPV4/UDP/192.168.244.6/5060",RemoteAddress="IPV4/UDP/62.171
...

fail2ban -- 170.233.159.112
...