sshd:I couldn't find a host name for either address, so I'm guessing they're probably some infected Windows machines hanging out on a DSL or cable modem connection.
unknown (220.127.116.11): 1522 Time(s)
root (18.104.22.168): 426 Time(s)
unknown (22.214.171.124): 32 Time(s)
root (126.96.36.199): 8 Time(s)
lp (188.8.131.52): 2 Time(s)
cyrus (184.108.40.206): 1 Time(s)
postfix (220.127.116.11): 1 Time(s)
smmsp (18.104.22.168): 1 Time(s)
uucp (22.214.171.124): 1 Time(s)
Unknown Account: 1554 Time(s)
I just checked our server's logs and, lo and behold, we have another contestant trying to break in right now. 126.96.36.199. The Real-Time IP Locator puts them somewhere in China. Out of mild curiosity, I ran a quick scan. It's a Linux machine. They have open ports 22 (ssh), 80 (web), and 3306 (MySQL). Since they were kind enough to put up a web server, you can see our attacker's web page by clicking here. (English semi-translation, courtesy of Google, here.)
I've been calling them our attacker, but in fairness it's not the people who own the machine--they were just clueless enough to put the machine on the Internet without properly securing it. Someone else scanned it, found it vulnerable, took it over, and turned it around to start scanning and attacking other machines. Anyone who speaks some variant of Chinese and has an international calling plan is more than welcome to phone them up--their number's on their web page--and tell them their machine's been cracked and is creating a nuisance.