# Each line: the address a match should give (- for none), a tab, the log line.
203.0.113.9	Failed password for root from 203.0.113.9 port 51234 ssh2
203.0.113.9	Failed password for invalid user admin from 203.0.113.9 port 51234 ssh2
2001:db8::9	Failed publickey for git from 2001:db8::9 port 4022 ssh2
203.0.113.9	Oct 22 10:00:01 web sshd-session[1234]: Failed password for invalid user oracle from 203.0.113.9 port 4022 ssh2
203.0.113.9	Invalid user test from 203.0.113.9 port 40022
203.0.113.9	Connection closed by invalid user admin 203.0.113.9 port 40022 [preauth]
203.0.113.9	Disconnected from authenticating user root 203.0.113.9 port 40022 [preauth]
203.0.113.9	error: maximum authentication attempts exceeded for root from 203.0.113.9 port 40022 ssh2 [preauth]
203.0.113.9	Unable to negotiate with 203.0.113.9 port 40022: no matching key exchange method found. Their offer: diffie-hellman-group1-sha1
203.0.113.9	banner exchange: Connection from 203.0.113.9 port 40022: invalid format
203.0.113.10	Failed password for invalid user x from 198.51.100.1 port 22 from 203.0.113.10 port 4444 ssh2
-	Accepted publickey for adam from 10.0.10.20 port 51000 ssh2: ED25519 SHA256:xyz
-	Received disconnect from 203.0.113.9 port 40022:11: disconnected by user
-	Server listening on 0.0.0.0 port 22.