Failed SSH login from 118.89.142.148 (CN/China/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SSHD]
Nov 11 09:41:07 ****** lfd[18602]: 151.80.40.90 (FR/France/ns3556926.ip-151-80-40.eu), 5 distributed sshd attacks on account [test] in the last 3600 secs - *Blocked in csf* [LF_DISTATTACK]
Nov 11 09:45:07 ****** lfd[18661]: 194.24.228.93 (FR/France/srv6.cineteck.net), 5 distributed sshd attacks on account [root] in the last 3600 secs - *Blocked in csf* [LF_DISTATTACK]
Nov 11 09:45:07 ****** lfd[18661]: 217.86.238.225 (DE/Germany/pd956eee1.dip0.t-ipconnect.de), 5 distributed sshd attacks on account [root] in the last 3600 secs - *Blocked in csf* [LF_DISTATTACK]
Nov 11 09:45:47 ****** lfd[18717]: (sshd) Failed SSH login from 200.27.240.219 (CL/Chile/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SSHD]
Nov 11 09:47:07 ****** lfd[18750]: (sshd) Failed SSH login from 61.164.37.69 (CN/China/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SSHD]
Nov 11 09:56:26 ****** lfd[18961]: *SSH login* from 49.35.20.181 into the root account using password authentication
Nov 11 09:58:47 ****** lfd[24070]: (sshd) Failed SSH login from 212.48.87.76 (GB/United Kingdom/019949.vps-10.com): 5 in the last 3600 secs - *Blocked in csf* [LF_SSHD]
Nov 11 10:07:47 ****** lfd[6257]: (sshd) Failed SSH login from 138.197.107.28 (US/United States/-): 5 in the last 3600 secs - *Blocked in csf* [LF_SSHD]
Nov 11 10:16:47 ****** lfd[18880]: 188.165.228.197 (FR/France/ns340441.ip-188-165-228.eu), 5 distributed sshd attacks on account [civil4m] in the last 3600 secs - *Blocked in csf* [LF_DISTATTACK]