2020-08-05T12:49:34.484272hermes postfix/smtpd[360639]: NOQUEUE: reject: RCPT from 2001-b011-4003-4681-a0fd-2c77-92f0-8566.dynamic-ip6.hinet.net[2001:b011:4003:4681:a0fd:2c77:92f0:8566]: 554 5.7.1 Service unavailable; Client host [2001:b011:4003:4681:a0fd:2c77:92f0:8566] blocked using zen.spamhaus.org; https://www.spamhaus.org/sbl/query/SBLCSS; from= to= proto=ESMTP helo=
...

Brute force attempt

Honeypot attack, port: 5555, PTR: 42-3-165-182.static.netvigator.com.

May  2 21:16:26 icinga sshd[52894]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=190.119.190.122 
May  2 21:16:28 icinga sshd[52894]: Failed password for invalid user auth from 190.119.190.122 port 42772 ssh2
May  2 21:29:08 icinga sshd[8573]: Failed password for root from 190.119.190.122 port 40360 ssh2
...

(sshd) Failed SSH login from 104.248.173.99 (GB/United Kingdom/-): 5 in the last 3600 secs

Unauthorized connection attempt detected from IP address 185.19.78.160 to port 23

Refused from hosts.deny. Log filler.

2020-05-02T20:32:56.104453shield sshd\[3457\]: Invalid user av from 51.75.17.122 port 33404
2020-05-02T20:32:56.108906shield sshd\[3457\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.ip-51-75-17.eu
2020-05-02T20:32:58.297824shield sshd\[3457\]: Failed password for invalid user av from 51.75.17.122 port 33404 ssh2
2020-05-02T20:41:15.619478shield sshd\[4736\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=122.ip-51-75-17.eu  user=root
2020-05-02T20:41:17.644348shield sshd\[4736\]: Failed password for root from 51.75.17.122 port 57720 ssh2

2020-05-03T05:31:04.052581vivaldi2.tree2.info sshd[16864]: Invalid user dsanchez from 142.93.101.148
2020-05-03T05:31:06.869510vivaldi2.tree2.info sshd[16864]: Failed password for invalid user dsanchez from 142.93.101.148 port 36678 ssh2
2020-05-03T05:33:05.972414vivaldi2.tree2.info sshd[16949]: pam_unix(sshd:auth): authentication failure; logname= uid=0 euid=0 tty=ssh ruser= rhost=142.93.101.148  user=root
2020-05-03T05:33:07.389514vivaldi2.tree2.info sshd[16949]: Failed password for root from 142.93.101.148 port 43626 ssh2
2020-05-03T05:35:09.304430vivaldi2.tree2.info sshd[17040]: Invalid user m from 142.93.101.148
...

May  2 19:15:28 ip-172-31-62-245 sshd\[30015\]: Invalid user aaa from 104.198.215.72\
May  2 19:15:29 ip-172-31-62-245 sshd\[30015\]: Failed password for invalid user aaa from 104.198.215.72 port 37864 ssh2\
May  2 19:19:48 ip-172-31-62-245 sshd\[30060\]: Invalid user guest from 104.198.215.72\
May  2 19:19:50 ip-172-31-62-245 sshd\[30060\]: Failed password for invalid user guest from 104.198.215.72 port 53661 ssh2\
May  2 19:24:13 ip-172-31-62-245 sshd\[30103\]: Invalid user hadoop from 104.198.215.72\

Login scan, accessed by IP not domain: 
154.126.79.223 - - [02/May/2020:06:44:45 +0100] "GET /adv,/cgi-bin/weblogin.cgi?username=admin%27%3Bls%20%23&password=asdf HTTP/1.1" 404 319 "-" "Mozilla/5.0"

05/02/2020-14:06:20.258664 192.42.116.28 Protocol: 6 ET TOR Known Tor Exit Node Traffic group 40

May  2 17:14:32 [host] sshd[28057]: pam_unix(sshd:
May  2 17:14:33 [host] sshd[28057]: Failed passwor
May  2 17:22:46 [host] sshd[28344]: Invalid user b

Automatic report - Banned IP Access

May  2 14:42:38 server1 sshd\[20370\]: Failed password for invalid user mk from 35.232.245.240 port 55764 ssh2
May  2 14:46:28 server1 sshd\[21615\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.232.245.240  user=root
May  2 14:46:30 server1 sshd\[21615\]: Failed password for root from 35.232.245.240 port 40986 ssh2
May  2 14:50:29 server1 sshd\[22808\]: Invalid user biology from 35.232.245.240
May  2 14:50:29 server1 sshd\[22808\]: pam_unix\(sshd:auth\): authentication failure\; logname= uid=0 euid=0 tty=ssh ruser= rhost=35.232.245.240 
...

CMS (WordPress or Joomla) login attempt.