SSH login attempts.

Sep  7 19:26:00 scw-focused-cartwright sshd[30118]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=31.202.195.1
Sep  7 19:26:03 scw-focused-cartwright sshd[30118]: Failed password for invalid user user from 31.202.195.1 port 49052 ssh2

Sep  7 18:50:46 ks10 sshd[894795]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=42.3.31.69 
Sep  7 18:50:48 ks10 sshd[894795]: Failed password for invalid user ubuntu from 42.3.31.69 port 55530 ssh2
...

Sep  7 18:50:57 ks10 sshd[894908]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=115.241.16.26 
Sep  7 18:51:00 ks10 sshd[894908]: Failed password for invalid user cablecom from 115.241.16.26 port 49624 ssh2
...

(imapd) Failed IMAP login from 201.140.110.78 (MX/Mexico/78.201-140-110.bestelclientes.com.mx): 1 in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_TRIGGER; Logs: Sep  8 09:26:39 ir1 dovecot[3110802]: imap-login: Disconnected (auth failed, 1 attempts in 6 secs): user=, method=PLAIN, rip=201.140.110.78, lip=5.63.12.44, session=

Icarus honeypot on github

162.247.74.200 (US/United States/-), 6 distributed sshd attacks on account [root] in the last 3600 secs; Ports: *; Direction: inout; Trigger: LF_DISTATTACK; Logs: Sep  8 02:54:40 server sshd[27439]: Failed password for root from 162.247.74.200 port 46228 ssh2
Sep  8 03:00:26 server sshd[27976]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.254.198.67  user=root
Sep  8 02:57:19 server sshd[27638]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.101.19.133  user=root
Sep  8 02:57:20 server sshd[27638]: Failed password for root from 46.101.19.133 port 37190 ssh2
Sep  8 02:56:48 server sshd[27597]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=103.86.134.194  user=root
Sep  8 02:56:50 server sshd[27597]: Failed password for root from 103.86.134.194 port 35960 ssh2

IP Addresses Blocked:

Sep  7 18:50:45 lavrea wordpress(yvoictra.com)[100647]: Authentication attempt for unknown user admin from 2604:a880:400:d1::b24:b001
...

Sep  8 05:30:34 pornomens sshd\[20708\]: Invalid user graphics from 46.146.240.185 port 39709
Sep  8 05:30:34 pornomens sshd\[20708\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=46.146.240.185
Sep  8 05:30:36 pornomens sshd\[20708\]: Failed password for invalid user graphics from 46.146.240.185 port 39709 ssh2
...

Sep  7 23:52:33 mellenthin sshd[23832]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=129.226.185.201
Sep  7 23:52:34 mellenthin sshd[23832]: Failed password for invalid user test from 129.226.185.201 port 53444 ssh2

detected by Fail2Ban

$f2bV_matches

Honeypot attack, port: 445, PTR: 109.238.187.190.adsl-customer.khalijfarsonline.net.

Time:     Tue Sep  8 04:24:42 2020 +0000
IP:       122.51.91.131 (CN/China/-)
Failures: 5 (sshd)
Interval: 3600 seconds
Blocked:  Permanent Block [LF_SSHD]

Log entries:

Sep  8 04:01:33 pv-14-ams2 sshd[25425]: Invalid user admin from 122.51.91.131 port 51394
Sep  8 04:01:35 pv-14-ams2 sshd[25425]: Failed password for invalid user admin from 122.51.91.131 port 51394 ssh2
Sep  8 04:19:11 pv-14-ams2 sshd[18021]: Invalid user demohcq from 122.51.91.131 port 47130
Sep  8 04:19:13 pv-14-ams2 sshd[18021]: Failed password for invalid user demohcq from 122.51.91.131 port 47130 ssh2
Sep  8 04:24:37 pv-14-ams2 sshd[3222]: Invalid user basapp from 122.51.91.131 port 46232

SSH login attempts.