freshlogs is the concept
see https://www.freshlogs.ca/fl-ToS-Disclaimer.html
Use https://freshlogs.ca/index.txt for complete long lines.
Use https://freshlogs.ca/prev-index.d/ for previous posts.

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.  Added a
quick list of unique usernames from dictionary attacks.

Sunday April 13, 2025

denied by configuration:

 5.157.10.83 (ping01.gilsouros.ws): 2 Times
 8.221.139.48: 1 Time
 14.103.116.192: 2 Times
 14.103.132.8: 4 Times
 27.150.190.177: 21 Times
 36.133.57.132: 21 Times
 42.51.13.138: 3 Times
 45.135.193.100: 2 Times
 45.154.13.222: 1 Time
 45.162.145.14 (14.145.162.45.provedorveloz.com.br): 7 Times
 46.3.98.40: 16 Times
 51.79.4.11 (ip11.ip-51-79-4.net): 4 Times
 64.62.156.202 (scan-88-0.shadowserver.org): 1 Time
 80.94.95.57: 2 Times
 80.94.95.112: 8 Times
 80.94.95.115: 5 Times
 80.94.95.116: 11 Times
 80.94.95.125: 10 Times
 80.94.95.155: 9 Times
 80.94.95.189: 10 Times
 80.94.95.241: 10 Times
 83.96.21.141: 2 Times
 83.168.95.46 (hosted-by.skillhost.pl): 24 Times
 83.235.16.111 (goevthes.static.otenet.gr): 2 Times
 87.248.226.146 (87.248.226.146.pool.sknt.ru): 24 Times
 91.196.35.126: 20 Times
 92.255.85.37: 30 Times
 92.255.85.107: 30 Times
 92.255.85.188: 5 Times
 92.255.85.189: 5 Times
 92.255.85.253: 18 Times
 93.108.120.147 (147.120.108.93.rev.vodafone.pt): 23 Times
 93.185.76.242: 15 Times
 101.36.113.80: 16 Times
 101.36.126.138: 19 Times
 101.100.194.23 (v22280703.sin01.serveradd.com): 20 Times
 103.56.115.23: 2 Times
 103.63.25.13 (ip103-63-25-13.cloudhost.web.id): 20 Times
 103.70.114.33: 1 Time
 103.70.115.15: 1 Time
 103.70.115.126: 1 Time
 103.117.56.152 (srv.foto.web.id): 22 Times
 103.145.145.74: 14 Times
 104.248.171.19: 13 Times
 104.248.223.148: 20 Times
 106.12.153.108: 4 Times
 106.51.105.25 (106.51.105.25.actcorp.in): 21 Times
 106.75.184.37: 1 Time
 111.67.202.34: 7 Times
 111.173.105.55: 4 Times
 112.6.214.244: 2 Times
 113.134.211.60: 2 Times
 116.110.89.6: 4 Times
 120.48.98.125: 4 Times
 122.96.151.110: 31 Times
 125.124.42.183: 19 Times
 143.110.252.26: 8 Times
 146.190.22.40 (academy.smarttourisme.net): 12 Times
 154.83.15.200: 20 Times
 154.125.49.174: 21 Times
 158.51.126.147: 3 Times
 159.203.167.23: 23 Times
 160.19.78.241: 1 Time
 160.191.52.73: 1 Time
 160.191.52.79: 1 Time
 160.191.52.81: 1 Time
 165.154.244.165: 11 Times
 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time
 178.128.82.23: 21 Times
 178.252.132.250: 20 Times
 179.43.176.236: 14 Times
 185.7.214.37: 33 Times
 185.42.12.240: 30 Times
 186.96.145.241 (fixed-186-96-145-241.totalplay.net): 7 Times
 192.163.200.252 (server.nephrology-associates.com): 21 Times
 193.254.225.100 (100.225.254.193.infosys.su): 2 Times
 194.0.234.16: 1 Time
 194.0.234.19: 12 Times
 195.161.68.104 (srv247-vps-st.jino.ru): 15 Times
 195.178.110.207: 23 Times
 195.211.191.125: 7 Times
 196.251.85.62: 1 Time
 197.5.145.150: 2 Times
 200.189.192.3 (spo.dts.gemalto.com.br): 14 Times
 202.168.179.141: 1 Time
 208.109.15.199 (199.15.109.208.host.secureserver.net): 26 Times
 209.38.111.217: 19 Times
 209.141.52.5 (sabiwasa.tk): 3 Times

system login attempted:

 sshd : 4 Times
 bin : 1 Time
 nobody : 3 Times
 root : 713 Times

received disconnect:

  [preauth] : 143 Times
 Bye Bye [preauth] : 1103 Times
 Bye [preauth] : 54 Times
 drop connection #10 from [111.67.202.34]:52224 past MaxStartups : 1 Time
 drop connection #11 from [111.67.202.34]:34542 past MaxStartups : 1 Time
 error: Protocol major versions differ: 2 vs. 1 : 2 Times
 error: beginning MaxStartups throttling : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 1 Time
 error: kex_exchange_identification: read: Connection reset by peer : 17 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 9 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 9 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 9 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 9 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 9 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 9 Times
 exited MaxStartups throttling after 00:00:24, 2 connections dropped : 1 Time
 fatal: userauth_finish: send failure packet: Connection reset by peer [preauth] : 1 Time

dictionary attacks: 395 unique usernames.

 1 12345 1502 a aaa aaPower ab abc abe acs actions activemq adfexc adi
 aditya adm Admin admin Admin1 admin1 admin123 admin1234 Administrator
 administrator afa akbar alex alfa ali ambari amine anon anonymous anton
 anwar app appuser aramos arkserver auditor azureuser BACKUP baikal bbs
 beta blue bot cds celery celeryuser ceshi chris chrism Cisco cisco citel
 clement cmm cognos config contactus crv csadmin CSG csserver daniel
 david db2inst1 debian Demo demo demos deploy deployuser dev devops
 devtest dmdba dockeradmin dolphinscheduler dot draytek drcomadmin dw
 eacadm eagle ec2-user elastic elasticsearch eos eren erpnext es esearch
 fastuser filippo flip frappe freshlogs ftm ftp ftpuser ftpusers ftpusr
 fwupgrade george gf giovanni git github gpadmin group1 Guest guest1
 habiba hacluster hello helpdesk hrm hupass huy hyliu icp images info
 innova install installer instrument irina ismail isp it ivan james janusz
 jeffrey jenkins jenny jessica jesus Jirka joel joro jose jtribino julian
 julien junlong kafka kamal kevin king kirill kodi kunal kyivstar lab
 laravel lhy li library link login lpadmin lrendon lsfadmin ltc ma mahdavi
 maint manfred margarita mark master mayuri mgts mika mike minecraft ming
 mininet ml mohamed mohammed mongo monitor mosprop mother mp mw myftp
 mysql n nada nadmin natasha naveen netlink netscreen newuser nextcloud
 nginx nicole nikita niko nils noc node nokia (none) nsroot nvidia odoo
 off office oleg omar onlime_r OO op opc operator oracle orion pacs
 palworld paula payara pedro peter php pi PlcmSpIp plex PLMIMService
 postgres prometheus proxyuser pwrchute python pzserver qbtuser qsecofr
 qsrvbas quinn rails rajesh readonly redmine remote reza rgarcia ricardo
 rich rinet rock rokos roman root2 rootuser rose rtorrent rustserver
 sa salavat sales sammy samuel sandeep sandro santhosh scm scott secret
 secure sergey serv server service services setpriv sftpuser share shashi
 shubham shutdown sina siva snx sol solr soporte spark spring squid
 steam student su subi sun superuser support support1 sybase sysadmin
 taiko tb teamspeak telco tele telnet temp Test test test01 test1 test5
 testa testadmin teste tester testftp testpass testuser tezos therese
 thomas titan tk tmax ton toto training ts tt tuan tv ubnt ubuntu uno85c
 upload User user user03 user1 user10 user15 user2 user3 usera useradmin
 USERID user_jenkins Username username usuario vagrant valentyna valheim
 vasya vasylyi vhserver victor vyos wanghy wangjia wasadmin web weblogic
 webmaster webshield weiqing wenwu wesley wifi wsq ww wwUser www wwwroot
 x xbox xg xiao xiaohua xiaolin xmr xq yhj zdyif zhangfeng zk zone zs