This list of IP's is comming from a range of servers that mitigate brute force attacks, usually Wordpress attacks. I use it personally everywhere in firewalls. You can access it here: http://blacklist.byteless.net/
They all make automated login attemps or perform malicious ssh attacks, all brute force. The list is for the most part automated but manual additions happen as wel.