freshlogs is the concept
see https://www.freshlogs.ca/fl-ToS-Disclaimer.html
Use https://freshlogs.ca/index.txt for complete long lines.
Use https://freshlogs.ca/prev-index.d/ for previous posts.

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.  Added a
quick list of unique usernames from dictionary attacks.

Sunday April 20, 2025

denied by configuration:

 5.182.83.231 (undefined.hostname.localhost): 13 Times
 8.222.181.172: 1 Time
 14.103.112.114: 3 Times
 14.116.189.74: 6 Times
 39.109.116.40: 11 Times
 45.148.10.240: 38 Times
 45.158.59.60: 13 Times
 49.49.230.115 (mx-ll-49.49.230-115.dynamic.3bb.in.th): 10 Times
 57.129.16.89 (comercialatlas08.flomarc.band): 14 Times
 64.62.197.239 (scan-51m.shadowserver.org): 1 Time
 64.227.30.242: 13 Times
 67.10.184.83 (syn-067-010-184-083.res.spectrum.com): 3 Times
 74.94.234.151 (74-94-234-151-Michigan.hfc.comcastbusiness.net): 16 Times
 79.104.0.82: 15 Times
 80.94.95.115: 7 Times
 80.94.95.116: 7 Times
 80.94.95.125: 3 Times
 80.94.95.155: 1 Time
 80.94.95.189: 3 Times
 80.94.95.241: 3 Times
 81.192.46.29 (adsl-29-46-192-81.adsl.iam.net.ma): 14 Times
 82.140.0.119: 1 Time
 88.214.48.10: 7 Times
 88.214.48.11: 4 Times
 88.214.48.17: 28 Times
 88.214.48.18: 30 Times
 89.138.57.247 (89-138-57-247.bb.netvision.net.il): 2 Times
 94.141.103.179: 7 Times
 101.36.231.233: 4 Times
 101.126.132.190: 1 Time
 103.31.38.106 (ip103-31-38-106.cloudhost.web.id): 10 Times
 103.56.115.41: 3 Times
 103.157.224.104: 2 Times
 103.174.115.172 (ip103-174-115-172.cloudhost.web.id): 13 Times
 103.187.147.61 (103-187-147-61.fixed.kpn.net): 16 Times
 103.245.111.90: 13 Times
 106.12.153.108: 4 Times
 110.42.48.225: 4 Times
 112.187.179.183: 13 Times
 113.31.103.19 (vn0t7.cn): 6 Times
 116.98.172.191 (dynamic-adsl.viettel.vn): 5 Times
 116.110.22.231: 3 Times
 116.110.86.9: 4 Times
 116.110.93.190: 4 Times
 116.110.118.208: 3 Times
 119.96.221.127: 6 Times
 120.48.98.125: 4 Times
 120.229.207.19: 9 Times
 122.96.151.110: 29 Times
 122.160.46.61 (abts-north-static-061.46.160.122.airtelbroadband.in): 7 Times
 123.58.209.236: 13 Times
 128.199.82.194: 13 Times
 128.199.128.242: 11 Times
 136.232.11.10: 4 Times
 138.84.41.34 (customer.bgtacol1.pop.starlinkisp.net): 3 Times
 139.59.114.137: 13 Times
 146.190.22.40 (academy.smarttourisme.net): 12 Times
 147.45.134.171: 3 Times
 148.216.28.11: 15 Times
 149.86.144.43 (undefined.hostname.localhost): 13 Times
 151.44.135.168 (adsl-ull-168-135.44-151.wind.it): 7 Times
 151.46.212.206 (adsl-ull-206-212.46-151.wind.it): 4 Times
 152.32.145.111: 6 Times
 154.92.22.181: 13 Times
 160.191.52.81: 5 Times
 162.214.211.246 (avo.avowstech.com): 10 Times
 176.109.92.170: 10 Times
 176.118.164.239: 18 Times
 180.93.172.127 (static.vinacis.com): 16 Times
 183.83.196.204 (broadband.actcorp.in): 8 Times
 183.110.116.126: 12 Times
 185.22.154.172: 2 Times
 185.213.165.126 (static.126.165.213.185.clients.irandns.com): 8 Times
 185.255.91.243 (static.243.91.255.185.clients.irandns.com): 13 Times
 188.83.65.78 (bl18-65-78.dsl.telepac.pt): 4 Times
 191.232.178.154: 15 Times
 192.163.200.252 (server.nephrology-associates.com): 10 Times
 192.210.233.234 (fina.myregserver.top): 9 Times
 193.32.162.84: 15 Times
 193.32.162.97: 37 Times
 193.32.162.134: 33 Times
 193.176.23.6: 30 Times
 193.176.23.7: 29 Times
 194.0.234.16: 5 Times
 194.0.234.19: 26 Times
 195.211.191.125: 4 Times
 196.188.63.85: 5 Times
 196.251.88.103: 1 Time
 202.72.235.208 (208-235-72-202-rankstel.net): 11 Times
 203.109.35.235: 8 Times
 203.177.0.71: 12 Times
 209.38.27.191: 1 Time
 213.155.195.169 (213-155-195-x.dynamic.b-domolink.net): 16 Times
 217.182.230.0 (ip0.ip-217-182-230.eu): 12 Times
 218.56.160.82: 3 Times
 219.147.74.48: 14 Times
 220.174.150.46: 2 Times
 222.118.167.160: 2 Times

system login attempted:

 sshd : 2 Times
 lp : 1 Time
 mail : 2 Times
 nobody : 3 Times
 root : 898 Times
 uucp : 2 Times
 www-data : 1 Time

received disconnect:

  [preauth] : 372 Times
 Bye Bye [preauth] : 1011 Times
 Bye [preauth] : 15 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 3 Times
 error: kex_exchange_identification: read: Connection reset by peer : 14 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 8 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 8 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 8 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 8 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 8 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 8 Times

dictionary attacks: 473 unique usernames.

 1 1234 1502 aaPower ab abc accueil ada adm Admin admin Admin1 admin1
 admin123 Administrator administrator adminuser adt agnes ahmed ai
 airflow ajay ak akash alex ali amine anon anonymous anton appuser
 archivo arman arthur artin astra astro asw auditor autcom authority
 automation BACKUP bahar bb bbs bender binance blue bnb bobo boris cb
 chat chris cisco client config confluence console contact corentin crv
 CSG ct cuc cy d dahua dambrosio dan dani daniel dark david dbms db_user
 dcm4chee ddd debian deep deepak default delegate dell demo dennis
 deploy deployer depot dev devel develop developer development devuser
 diego ding dingtalk director django dmdba doge dot dummy ec2-user eddie
 edubook elasticsearch elsearch emcali emilia engineer eoffice erp erwin
 es esteban esuser etienne eureka EXAMPLES exuser ezi factory federica
 frappe frappe-user freshlogs front frontend ftp ftp1 ftp-test ftptest
 ftp_user ftpuser galaxy Gearguy gec gerencia gianluca git glassfish gns3
 gokul goran Guest guest guest1 gustavo hadoop harsh hasan helpdesk henri
 hesam himanshu hostinger hpc-riscv hr hscroot httpadmin hu huawei hyliu
 i ideal IEUser ilya inbound info informix install installer instrument
 integral invite irina isp itadmin ivan jack james jason javad javid jb
 jester jimmy jito john jordan jorge jupyterhub jvj kafka kelvin kevin
 kim kiran komodo kong kraken kun kyivstar kyt laura leos life liferay
 lighthouse lihong lin lina liulei liwei loginuser logviewer ltc lu ly m1
 maj mapr maribel mary mason master maya me mgeweb mgts mh michael michel
 mina minecraft moein mohammad monitoring moreno mother munin musicbot
 mysql myuser mz nagios nas natalia nb neo4j neptun netscreen new1 nexus
 nfs nftp nick nico nicolas noah noc node (none) npm NSA nsroot nutanix
 nz odoo odoo2 odoo8 okx olb oleg omm oneadmin oot op openfiler openkm
 operator opp ops oracle osmc ospite partimag patricia pavel payment
 peertube perforce period peyman pgadmin pi piotr polkadot pool popo
 postgres postgresql present primenet prova prueba prueba1 pruebasfe
 psybnc pual pub public pw qiyuesuo qsrvbas r00t radmin rahul ram ranger
 richard ricky riscv robert root1 royal sahar sam santana santhosh sara
 sascha scanner scott scs se seafile sean secret secure security sell
 sergey server service sfserver sharepoint shop shred shredstream shree
 sinusbot slave sls smartx smb smbuser smp sol solana solana-validator
 somenathd sonar sonos spegni squid stake status steam stefano student
 su superadmin superuser supervisor support support1 susi svn SYS sysadm
 system tazos teamspeak techno temp tempuser ten terraria tesoreria TEST
 test test10 test2 test7 teste tester testftp testing testuser thomas
 thor tianhao tl tmp tom tomcat toptst trx ts3server ttt ty ubnt ubuntu
 unidade uniswap upload us usario User user user1 user2 user3 user6
 username usher vadim vagrant validator vhserver vijay vincent vm vms
 vpn vscode vyos wan web webuser wendy wms wwUser www wyse xbox xiaolong
 xrp xy xyh xyk yashar yhx ylee yos ysz yuli yxsong yy yzy zhangjunyin
 zhanglei zhangqing zhangyi zhaojun zimbra zwj zzz