SSH login attempts.

2020-04-08 22:32:20 H=(163.com) [183.129.55.90]:58430 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3, 127.0.0.2, 127.0.0.11) (https://www.spamhaus.org/sbl/query/SBL467431)
2020-04-08 22:35:08 H=(163.com) [183.129.55.90]:65465 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.3, 127.0.0.2, 127.0.0.11) (https://www.spamhaus.org/query/ip/183.129.55.90)
2020-04-08 22:50:14 H=(163.com) [183.129.55.90]:57615 I=[192.147.25.65]:25 F= rejected RCPT : RBL: found in thrukfz5b56tq6xao6odgdyjrq.zen.dq.spamhaus.net (127.0.0.4, 127.0.0.11, 127.0.0.2, 127.0.0.3) (https://www.spamhaus.org/sbl/query/SBLCSS)
...

Icarus honeypot on github

Lines containing failures of 3.89.128.66
Apr  8 17:54:42 linuxrulz sshd[9502]: Invalid user test from 3.89.128.66 port 55486
Apr  8 17:54:42 linuxrulz sshd[9502]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.89.128.66 
Apr  8 17:54:44 linuxrulz sshd[9502]: Failed password for invalid user test from 3.89.128.66 port 55486 ssh2
Apr  8 17:54:45 linuxrulz sshd[9502]: Received disconnect from 3.89.128.66 port 55486:11: Bye Bye [preauth]
Apr  8 17:54:45 linuxrulz sshd[9502]: Disconnected from invalid user test 3.89.128.66 port 55486 [preauth]
Apr  8 18:07:59 linuxrulz sshd[11364]: Invalid user ubuntu from 3.89.128.66 port 39236
Apr  8 18:07:59 linuxrulz sshd[11364]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=3.89.128.66 
Apr  8 18:08:01 linuxrulz sshd[11364]: Failed password for invalid user ubuntu from 3.89.128.66 port 39236 ssh2


........
-----------------------------------------------
https://www.blocklist.de/en/view.html?

Apr  9 10:18:45 localhost sshd[13939]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=cpe-174-105-201-174.columbus.res.rr.com  user=mail
Apr  9 10:18:47 localhost sshd[13939]: Failed password for mail from 174.105.201.174 port 57252 ssh2
...

Dovecot Invalid User Login Attempt.

[ssh] SSH attack

Apr  9 11:25:28 vpn01 sshd[13514]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=144.217.206.177
Apr  9 11:25:30 vpn01 sshd[13514]: Failed password for invalid user deploy from 144.217.206.177 port 52556 ssh2
...

Apr  9 18:34:27 bacztwo sshd[12122]: error: PAM: Authentication failure for root from 222.186.173.215
Apr  9 18:34:31 bacztwo sshd[12122]: error: PAM: Authentication failure for root from 222.186.173.215
Apr  9 18:34:34 bacztwo sshd[12122]: error: PAM: Authentication failure for root from 222.186.173.215
Apr  9 18:34:34 bacztwo sshd[12122]: Failed keyboard-interactive/pam for root from 222.186.173.215 port 59648 ssh2
Apr  9 18:34:24 bacztwo sshd[12122]: error: PAM: Authentication failure for root from 222.186.173.215
Apr  9 18:34:27 bacztwo sshd[12122]: error: PAM: Authentication failure for root from 222.186.173.215
Apr  9 18:34:31 bacztwo sshd[12122]: error: PAM: Authentication failure for root from 222.186.173.215
Apr  9 18:34:34 bacztwo sshd[12122]: error: PAM: Authentication failure for root from 222.186.173.215
Apr  9 18:34:34 bacztwo sshd[12122]: Failed keyboard-interactive/pam for root from 222.186.173.215 port 59648 ssh2
Apr  9 18:34:38 bacztwo sshd[12122]: error: PAM: Authent
...

Unauthorized connection attempt detected from IP address 46.167.205.4 to port 3389

Too many connections or unauthorized access detected from Arctic banned ip

Honeypot attack, port: 5555, PTR: PTR record not found

CMS (WordPress or Joomla) login attempt.

Apr  9 07:12:23 vps sshd[634434]: Failed password for invalid user ubuntu from 1.194.238.187 port 47591 ssh2
Apr  9 07:16:43 vps sshd[659178]: Invalid user csgoserver from 1.194.238.187 port 39758
Apr  9 07:16:43 vps sshd[659178]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=1.194.238.187
Apr  9 07:16:45 vps sshd[659178]: Failed password for invalid user csgoserver from 1.194.238.187 port 39758 ssh2
Apr  9 07:21:02 vps sshd[682034]: Invalid user student from 1.194.238.187 port 60154
...

Apr  9 11:00:36 server sshd\[6551\]: Invalid user postgres from 94.130.243.89
Apr  9 11:00:36 server sshd\[6551\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.89.243.130.94.clients.your-server.de 
Apr  9 11:00:39 server sshd\[6551\]: Failed password for invalid user postgres from 94.130.243.89 port 37266 ssh2
Apr  9 11:06:52 server sshd\[8063\]: Invalid user user from 94.130.243.89
Apr  9 11:06:52 server sshd\[8063\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=static.89.243.130.94.clients.your-server.de 
...