Trying to learn here, are these SSH login attempts on the root user? If not, is it just the firewall logs?