Some amount of messages from logcheck is due to unsuccessful login attempts from ssh bots.

• Prevent password-based login for root, but allow key-based login
  see: PermitRootLogin without-password
• Change standard ssh port