Mar 17 16:29:37 hq-ipam-01 sshd[3802]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ithd-1-3.domain.local
Mar 17 16:29:39 hq-ipam-01 sshd[3798]: error: PAM: Authentication failure for illegal user admin.new from ithd-1-3.domain.local
Mar 17 16:29:39 hq-ipam-01 sshd[3798]: Failed keyboard-interactive/pam for invalid user admin.new from <ip> port 62016 ssh2
Mar 17 16:29:39 hq-ipam-01 sshd[3798]: Postponed keyboard-interactive for invalid user admin.new from <ip> port 62016 ssh2 [preauth]
Mar 17 16:31:45 hq-ipam-01 sshd[3814]: Invalid user admin.new from <ip>
Mar 17 16:31:45 hq-ipam-01 sshd[3814]: input_userauth_request: invalid user admin.new [preauth]
Mar 17 16:31:45 hq-ipam-01 sshd[3814]: Postponed keyboard-interactive for invalid user admin.new from <ip> port 63064 ssh2 [preauth]
Mar 17 16:31:48 hq-ipam-01 sshd[3818]: pam_unix(sshd:auth): check pass; user unknown
Mar 17 16:31:48 hq-ipam-01 sshd[3818]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=ithd-1-3.domain.local

Mar 17 16:31:50 hq-ipam-01 sshd[3814]: Failed keyboard-interactive/pam for invalid user admin.new from <ip> port 63064 ssh2