Jun  2 06:19:05 piServer sshd[22228]: Failed password for root from 46.105.149.168 port 40454 ssh2
Jun  2 06:22:33 piServer sshd[22561]: Failed password for root from 46.105.149.168 port 45348 ssh2
...

Jun  2 05:43:18 eventyay sshd[27800]: Failed password for root from 49.233.183.15 port 33530 ssh2
Jun  2 05:47:00 eventyay sshd[27871]: Failed password for root from 49.233.183.15 port 54620 ssh2
...

Jun  2 05:01:29 *** sshd[16739]: User root from 164.132.46.197 not allowed because not listed in AllowUsers

Jun  2 06:51:49 pve1 sshd[21241]: Failed password for root from 188.226.131.171 port 54116 ssh2
...

[H1.VM7] Blocked by UFW

Jun  2 14:16:27 web1 sshd[4978]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.174.87  user=root
Jun  2 14:16:30 web1 sshd[4978]: Failed password for root from 106.75.174.87 port 53032 ssh2
Jun  2 14:41:00 web1 sshd[10881]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.174.87  user=root
Jun  2 14:41:02 web1 sshd[10881]: Failed password for root from 106.75.174.87 port 47342 ssh2
Jun  2 14:45:22 web1 sshd[11949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.174.87  user=root
Jun  2 14:45:24 web1 sshd[11949]: Failed password for root from 106.75.174.87 port 34366 ssh2
Jun  2 14:49:38 web1 sshd[12900]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=106.75.174.87  user=root
Jun  2 14:49:39 web1 sshd[12900]: Failed password for root from 106.75.174.87 port 49628 ssh2
Jun  2 14:53:43 web1 sshd[13945]: pam_
...

2020-06-02T06:12:57.165952shield sshd\[671\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.ip-51-255-171.eu  user=root
2020-06-02T06:12:59.374870shield sshd\[671\]: Failed password for root from 51.255.171.172 port 59458 ssh2
2020-06-02T06:16:25.301627shield sshd\[1299\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.ip-51-255-171.eu  user=root
2020-06-02T06:16:27.063831shield sshd\[1299\]: Failed password for root from 51.255.171.172 port 35510 ssh2
2020-06-02T06:20:03.858135shield sshd\[2181\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=172.ip-51-255-171.eu  user=root

"XSS Attack Detected via libinjection - Matched Data: XSS data found within ARGS_NAMES:

Jun  2 09:44:51 abendstille sshd\[13218\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.23  user=root
Jun  2 09:44:52 abendstille sshd\[13164\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=222.186.175.23  user=root
Jun  2 09:44:53 abendstille sshd\[13218\]: Failed password for root from 222.186.175.23 port 56603 ssh2
Jun  2 09:44:54 abendstille sshd\[13164\]: Failed password for root from 222.186.175.23 port 23025 ssh2
Jun  2 09:44:55 abendstille sshd\[13218\]: Failed password for root from 222.186.175.23 port 56603 ssh2
...

200602  2:54:04 [Warning] Access denied for user 'root'@'185.153.196.226' (using password: YES)
200602  2:56:00 [Warning] Access denied for user 'root'@'185.153.196.226' (using password: YES)
200602  3:01:33 [Warning] Access denied for user 'root'@'185.153.196.226' (using password: YES)
...

(imapd) Failed IMAP login from 78.140.7.9 (RU/Russia/n7-c9.client.tomica.ru): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Jun  2 11:22:58 ir1 dovecot[2885757]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=78.140.7.9, lip=5.63.12.44, session=

Jun  2 08:28:06 xeon sshd[64612]: Failed password for root from 193.112.111.28 port 35178 ssh2

Jun  2 09:28:11 h2829583 sshd[30353]: Failed password for root from 182.74.86.27 port 53770 ssh2

Jun  2 14:35:50 webhost01 sshd[12493]: Failed password for root from 183.82.2.22 port 59430 ssh2
...

spam