freshlogs is the concept
see https://www.freshlogs.ca/fl-ToS-Disclaimer.html
Use https://freshlogs.ca/index.txt for complete long lines.
Use https://freshlogs.ca/prev-index.d/ for previous posts.

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.  Added a
quick list of unique usernames from dictionary attacks.

Tuesday April 22, 2025

denied by configuration:

 14.103.54.150: 3 Times
 14.103.115.5: 4 Times
 20.81.179.106: 11 Times
 20.127.224.153: 13 Times
 27.96.84.210 (ezecom.27.96.84.0.210.ezecom.com.kh): 3 Times
 35.207.200.77 (77.200.207.35.bc.googleusercontent.com): 8 Times
 36.133.40.112: 7 Times
 37.32.42.166: 10 Times
 44.220.185.81 (ec2-44-220-185-81.compute-1.amazonaws.com): 1 Time
 45.207.208.177: 10 Times
 46.101.74.125: 1 Time
 49.72.212.22: 6 Times
 51.91.110.49 (49.ip-51-91-110.eu): 10 Times
 52.187.9.8: 13 Times
 59.34.217.89: 14 Times
 61.80.179.118: 12 Times
 64.62.156.181 (scan-85-9.shadowserver.org): 1 Time
 67.187.189.42 (c-67-187-189-42.hsd1.ca.comcast.net): 13 Times
 74.208.112.103 (ip74-208-112-103.pbiaas.com): 17 Times
 79.32.27.198 (host-79-32-27-198.retail.telecomitalia.it): 5 Times
 80.94.95.125: 10 Times
 80.94.95.155: 9 Times
 80.94.95.189: 10 Times
 81.133.106.57 (host81-133-106-57.in-addr.btopenworld.com): 4 Times
 82.207.8.242 (242-8-207-82.pool.ukrtel.net): 15 Times
 87.205.17.23 (87-205-17-23.static.ip.netia.com.pl): 13 Times
 88.214.48.16: 12 Times
 88.214.48.17: 30 Times
 88.214.48.18: 28 Times
 92.118.39.65: 16 Times
 93.180.134.45 (tres-vm.rcl): 9 Times
 101.126.77.205: 1 Time
 101.227.203.162: 7 Times
 103.13.206.28 (ip103-13-206-28.cloudhost.web.id): 9 Times
 103.23.199.119 (ip103-23-199-119.cloudhost.web.id): 10 Times
 103.61.123.132: 9 Times
 103.171.85.115 (ip103-171-85-115.cloudhost.web.id): 3 Times
 103.174.115.99 (ip103-174-115-99.cloudhost.web.id): 10 Times
 106.12.153.108: 4 Times
 111.160.79.114 (no-data): 1 Time
 113.125.169.23: 13 Times
 116.105.210.165: 2 Times
 117.50.67.183: 5 Times
 120.48.98.125: 5 Times
 122.96.151.110: 20 Times
 124.29.237.27: 6 Times
 138.197.118.17: 4 Times
 146.190.22.40 (academy.smarttourisme.net): 12 Times
 149.86.144.43 (undefined.hostname.localhost): 13 Times
 157.66.100.139: 10 Times
 160.191.52.84: 5 Times
 163.172.98.52 (163-172-98-52.rev.poneytelecom.eu): 10 Times
 165.22.217.96: 14 Times
 165.154.172.232: 10 Times
 165.154.233.209: 10 Times
 171.251.26.205 (dynamic-ip-adsl.viettel.vn): 5 Times
 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time
 172.245.11.102 (quiaqygav.privatpaketeblank.shop): 2 Times
 175.126.166.172: 13 Times
 181.228.68.222 (222-68-228-181.cab.prima.com.ar): 11 Times
 182.43.75.147: 3 Times
 182.184.75.7: 5 Times
 187.49.152.12 (ns3.entertelecom.com.br): 12 Times
 187.170.74.95 (dsl-187-170-74-95-dyn.prod-infinitum.com.mx): 14 Times
 189.7.17.61 (bd07113d.virtua.com.br): 8 Times
 193.32.162.84: 15 Times
 193.32.162.135: 28 Times
 193.176.23.6: 28 Times
 193.176.23.7: 30 Times
 195.178.110.6: 196 Times
 195.211.191.125: 7 Times
 196.189.126.17: 13 Times
 196.251.69.116: 10 Times
 196.251.85.62: 5 Times
 196.251.87.74: 5 Times
 196.251.88.103: 1 Time
 197.221.232.44 (16.44.telone.co.zw): 10 Times
 209.38.19.113: 1 Time
 210.113.70.126: 1 Time
 212.98.60.188 (212-98-60-188.static.adslpremium.ch): 13 Times
 212.227.232.57 (ip212-227-232-57.pbiaas.com): 15 Times
 218.84.168.131: 1 Time

system login attempted:

 daemon : 2 Times
 games : 2 Times
 mail : 1 Time
 root : 850 Times
 uucp : 1 Time

received disconnect:

  [preauth] : 410 Times
 Bye Bye [preauth] : 807 Times
 Bye [preauth] : 40 Times
 error: Protocol major versions differ: 2 vs. 1 : 2 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 3 Times
 error: kex_exchange_identification: read: Connection reset by peer : 23 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times

dictionary attacks: 422 unique usernames.

 1234 123456 a aaPower abc ada adm ADMIN Admin admin admin01 admin1
 administrador administrator alec alejandro alex alice alma alpha andrea
 angus anonymous ansible anton app apple applmgr appusr ari aris arjun
 arkserver arun asan astha axway BACKUP baikal bitrix blog borg bpm
 cad caja2 calibre cardano cc cedric chris Cisco cisco citel cloud
 coding config cortega cosmos cxj cxz dad daniel dante database david
 db db2inst1 debian deep default delegate DEMO demo demos denis deploy
 deployment deposito dev device dipesh director docker dockeradmin
 draytek dspace dt eagle ec2-user elastic elasticsearch elk elsa emcali
 empbackup ems epqqa erwin esearch eth ether ethereum ethereumdocker
 etienne EXAMPLES explicatos factorio fakhri fiscal formation frappe
 freshlogs front-user ftp ftpadmin ftptest ftp_user ftpuser ftpuser1
 fts gaurav gec geoeast georg gerrit gf ghost giri git git2 gitlab
 gmodserver gns3 going gpadmin greek gs Guest guest guest1 gwei hadoop
 headscale hello hjl hscroot hua huawei i ibrahim id IEUser igor iman
 import informix installer instrument irina itai iva ivan jakob jayden
 jc jeckson jenkins jenny jerry jiayin jin Jirka john joyce judith jun
 kangkang kaushik kevin keycloak khang khoa kni kodi koeskurnia lankacom
 laurent lg lhf liman lina lisi liyan lizhao ljy lkh loginuser lpadmin
 lucas luke lzx machine maint manager manish mapadmin mapr max maxadmin
 mc2 mcserver mdm me minecraft minikube mma mobile mohit moni monitor
 monitoreo mother move mpiuser mqm mts myappuser myftp mysql nacho nana
 natasha netlink netscreen newuser nexus nginx nikita niko nikola nils
 ninja nino nitin nmt node nokia (none) noreply npm office oleg omega
 oneadmin OO openhabian openvpn operator opus oracle oscar pam panfeng
 paula pb pearl peertube phil php pi PlcmSpIp polkadot pos postgres ppp
 praveen prime printer prometheus proxyuser public pw pwrchute qzh raaj
 rabbitmq raghav ram ramya remoto rex rob robot ronny rose runner sa
 saeed salam sam samsung sandeep sander sara sarah sas saurabh savannah
 scan school scott sdtdserver se security sergey server service setup
 sftp sftpuser shahab shahbaz simo simone sinusbot site smb software
 soheil sol solana solx sonia sonos spring sqladmin squid ssh staff steam
 stserver super support sysadm sysadmin system tanglv taraneh teamspeak
 teamspeak3 tehran telecomadmin telekom test test1 test2 test3 teste
 tester testing testuser tomcat ton tony trouble trx ts3 ts3server
 tt tuser u ubnt ubuntu ubuntu1 ubuntu2 ubuntuserver uddalok uploads
 upwork usario user user002 user01 user1 user2 user3 username vagrant
 valera vali validate validator vhserver vicente victor vinod vnc vod
 vps walter wasadmin web3 WebAdmin webadmin weblogic webshield wenwu wj
 woc wp wuwei wwUser www wwwuser x xdp yanghui yee yw zhongwen zk zyf