Aug  3 15:15:37 fhem-rasp sshd[7560]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=111.229.33.175  user=root
Aug  3 15:15:39 fhem-rasp sshd[7560]: Failed password for root from 111.229.33.175 port 48448 ssh2
...

Lines containing failures of 141.126.128.239
Aug  3 14:01:34 nexus sshd[13085]: Invalid user admin from 141.126.128.239 port 33953
Aug  3 14:01:34 nexus sshd[13085]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.126.128.239
Aug  3 14:01:36 nexus sshd[13085]: Failed password for invalid user admin from 141.126.128.239 port 33953 ssh2
Aug  3 14:01:36 nexus sshd[13085]: Received disconnect from 141.126.128.239 port 33953:11: Bye Bye [preauth]
Aug  3 14:01:36 nexus sshd[13085]: Disconnected from 141.126.128.239 port 33953 [preauth]
Aug  3 14:01:37 nexus sshd[13087]: Invalid user admin from 141.126.128.239 port 34051
Aug  3 14:01:37 nexus sshd[13087]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=141.126.128.239


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?ip=141.126.128.239

Aug  3 13:59:41 ajax sshd[2977]: Failed password for root from 185.204.2.153 port 46982 ssh2

 TCP (SYN) 74.82.47.11:56500 -> port 23, len 44

RDP brute forcing (d)

Aug  3 02:37:13 web9 sshd\[24001\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.191.249  user=root
Aug  3 02:37:16 web9 sshd\[24001\]: Failed password for root from 203.195.191.249 port 33638 ssh2
Aug  3 02:40:48 web9 sshd\[24480\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.191.249  user=root
Aug  3 02:40:50 web9 sshd\[24480\]: Failed password for root from 203.195.191.249 port 43134 ssh2
Aug  3 02:44:31 web9 sshd\[24939\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=203.195.191.249  user=root

SMB Server BruteForce Attack

Fail2Ban Ban Triggered

Aug  3 14:33:45 ns382633 sshd\[23092\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.78.28.68  user=root
Aug  3 14:33:46 ns382633 sshd\[23092\]: Failed password for root from 220.78.28.68 port 40756 ssh2
Aug  3 14:43:16 ns382633 sshd\[24952\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.78.28.68  user=root
Aug  3 14:43:18 ns382633 sshd\[24952\]: Failed password for root from 220.78.28.68 port 17661 ssh2
Aug  3 14:47:45 ns382633 sshd\[25850\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=220.78.28.68  user=root

2020-08-03T14:08:32.902832shield sshd\[29421\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.247.69.105  user=root
2020-08-03T14:08:35.142792shield sshd\[29421\]: Failed password for root from 43.247.69.105 port 56070 ssh2
2020-08-03T14:13:02.633044shield sshd\[29815\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.247.69.105  user=root
2020-08-03T14:13:04.606943shield sshd\[29815\]: Failed password for root from 43.247.69.105 port 38168 ssh2
2020-08-03T14:17:27.622792shield sshd\[30342\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=43.247.69.105  user=root

firewall-block, port(s): 29559/tcp

Aug  3 13:30:58 ip-172-31-61-156 sshd[3478]: Failed password for root from 192.99.11.195 port 37685 ssh2
Aug  3 13:35:12 ip-172-31-61-156 sshd[3645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.11.195  user=root
Aug  3 13:35:15 ip-172-31-61-156 sshd[3645]: Failed password for root from 192.99.11.195 port 43841 ssh2
Aug  3 13:35:12 ip-172-31-61-156 sshd[3645]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=192.99.11.195  user=root
Aug  3 13:35:15 ip-172-31-61-156 sshd[3645]: Failed password for root from 192.99.11.195 port 43841 ssh2
...

Aug  3 19:19:32 itv-usvr-01 sshd[30755]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.223.143.101  user=root
Aug  3 19:19:34 itv-usvr-01 sshd[30755]: Failed password for root from 104.223.143.101 port 56074 ssh2
Aug  3 19:25:27 itv-usvr-01 sshd[30983]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.223.143.101  user=root
Aug  3 19:25:29 itv-usvr-01 sshd[30983]: Failed password for root from 104.223.143.101 port 54930 ssh2
Aug  3 19:27:15 itv-usvr-01 sshd[31083]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=104.223.143.101  user=root
Aug  3 19:27:17 itv-usvr-01 sshd[31083]: Failed password for root from 104.223.143.101 port 45116 ssh2

*Port Scan* detected from 172.114.251.148 (US/United States/cpe-172-114-251-148.socal.res.rr.com). 5 hits in the last 5 seconds

13:26:42.649 1 IMAP-004386([210.217.32.25]) failed to open 'hotornot@womble.org'. Connection from [210.217.32.25]:15464. Error Code=account is routed to NULL
...