freshlogs is the concept
see https://www.freshlogs.ca/fl-ToS-Disclaimer.html
Use https://freshlogs.ca/index.txt for complete long lines.
Use https://freshlogs.ca/prev-index.d/ for previous posts.

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.  Added a
quick list of unique usernames from dictionary attacks.

Sunday April 27, 2025

denied by configuration:

 8.138.155.88: 1 Time
 14.34.157.138: 14 Times
 14.103.108.225: 9 Times
 14.103.115.85: 4 Times
 14.103.127.235: 4 Times
 14.103.140.196: 3 Times
 14.116.189.74: 9 Times
 23.145.112.52: 1 Time
 37.148.206.165 (165.206.148.37.host.secureserver.net): 13 Times
 43.245.249.251: 4 Times
 45.148.10.240: 36 Times
 45.227.255.177: 1 Time
 46.101.23.51: 14 Times
 49.36.41.76: 19 Times
 49.232.167.144: 4 Times
 51.75.124.228 (vps-edcbbc9b.vps.ovh.net): 16 Times
 58.87.67.79: 2 Times
 58.211.191.14: 11 Times
 61.36.200.131: 15 Times
 61.72.55.130: 13 Times
 64.62.156.49 (scan-62-11.shadowserver.org): 1 Time
 74.94.234.151 (74-94-234-151-Michigan.hfc.comcastbusiness.net): 17 Times
 80.94.95.112: 9 Times
 80.94.95.115: 15 Times
 80.94.95.116: 14 Times
 80.94.95.125: 13 Times
 80.94.95.155: 3 Times
 82.140.0.119: 1 Time
 82.208.85.193 (82-208-85-193.static.mts-nn.ru): 3 Times
 88.214.48.10: 15 Times
 88.214.48.11: 14 Times
 88.214.48.16: 16 Times
 88.214.48.17: 24 Times
 88.214.48.18: 25 Times
 92.118.39.65: 22 Times
 92.118.39.97: 36 Times
 96.67.59.65: 14 Times
 96.78.175.39: 15 Times
 101.126.30.240: 2 Times
 101.126.31.191: 6 Times
 101.126.55.179: 2 Times
 101.126.68.247: 2 Times
 103.67.78.208 (ip103-67-78-208.cloudhost.web.id): 13 Times
 103.70.114.87: 5 Times
 103.70.115.6: 4 Times
 103.146.53.93: 10 Times
 103.172.204.83 (ip103-172-204-83.cloudhost.web.id): 13 Times
 103.197.184.12: 5 Times
 106.12.153.108: 4 Times
 111.67.201.36: 5 Times
 115.68.194.222: 14 Times
 116.105.217.192: 3 Times
 116.110.77.230: 5 Times
 116.204.34.225 (ecs-116-204-34-225.compute.hwclouds-dns.com): 2 Times
 117.34.125.173: 3 Times
 118.186.3.158: 6 Times
 120.48.98.125: 6 Times
 121.229.9.97: 9 Times
 122.96.151.110: 19 Times
 128.199.70.247: 5 Times
 128.199.188.253: 4 Times
 139.59.124.197: 2 Times
 140.249.199.13: 10 Times
 144.21.53.192: 2 Times
 146.59.236.77 (vps-2768e10e.vps.ovh.net): 13 Times
 146.190.22.40 (academy.smarttourisme.net): 13 Times
 149.86.144.42 (undefined.hostname.localhost): 10 Times
 150.129.63.14: 16 Times
 150.136.129.10: 11 Times
 152.32.135.139: 17 Times
 152.32.219.39: 4 Times
 154.124.130.132: 6 Times
 154.221.23.24: 2 Times
 157.230.241.23 (centralizedinc.com): 14 Times
 162.240.225.187 (server.micexams.com): 14 Times
 165.232.147.130: 17 Times
 172.86.92.174 (174.92.86.172.static.cloudzy.com): 5 Times
 172.105.102.42 (dev3.academyforinternetresearch.org): 1 Time
 175.126.166.172: 12 Times
 178.217.72.50: 18 Times
 181.164.27.204 (204-27-164-181.fibertel.com.ar): 16 Times
 182.253.156.173: 6 Times
 185.204.168.196: 15 Times
 185.213.164.175 (static.175.164.213.185.clients.irandns.com): 15 Times
 186.96.145.241 (fixed-186-96-145-241.totalplay.net): 3 Times
 193.32.162.97: 35 Times
 193.32.162.137: 3 Times
 193.123.114.34: 4 Times
 193.176.23.6: 25 Times
 193.176.23.7: 23 Times
 194.0.234.16: 6 Times
 194.0.234.19: 23 Times
 195.178.110.6: 129 Times
 196.207.235.144: 1 Time
 196.251.69.43: 5 Times
 196.251.69.91: 5 Times
 196.251.69.116: 5 Times
 196.251.70.234: 5 Times
 196.251.85.62: 5 Times
 196.251.87.42: 5 Times
 196.251.87.74: 9 Times
 198.1.117.220 (198-1-117-220.unifiedlayer.com): 13 Times
 201.138.175.133 (dsl-201-138-175-133-dyn.prod-infinitum.com.mx): 13 Times
 202.157.176.29: 15 Times
 208.69.84.112 (opvpndmz.dscws.com): 14 Times
 212.114.24.61 (899226383.box.freepro.com): 3 Times
 213.149.188.242 (213-188-242.static.cytanet.com.cy): 14 Times
 221.225.83.45: 8 Times
 221.229.220.180: 3 Times
 223.17.0.181 (181-0-17-223-on-nets.com): 14 Times
 223.247.218.112: 10 Times

system login attempted:

 sshd : 2 Times
 daemon : 1 Time
 games : 3 Times
 nobody : 2 Times
 root : 985 Times
 uucp : 1 Time
 www-data : 2 Times

received disconnect:

  [preauth] : 437 Times
 Bye Bye [preauth] : 1091 Times
 Bye [preauth] : 27 Times
 Client disconnecting normally [preauth] : 1 Time
 drop connection #10 from [103.70.115.6]:49118 past MaxStartups : 1 Time
 error: Protocol major versions differ: 2 vs. 1 : 2 Times
 error: beginning MaxStartups throttling : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 2 Times
 error: kex_exchange_identification: read: Connection reset by peer : 26 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times
 exited MaxStartups throttling after 00:00:25, 1 connections dropped : 1 Time

dictionary attacks: 509 unique usernames.

 1 1111 1234 12345 123456 1502 a aaPower abc acs ada adfexc adm Admin
 admin admin08 admin1 admini administrador Administrator administrator
 airflow akshay algorand ali alien alin amir anonymous ansible anwar
 appuser ari array asuarez avax aws backend BACKUP backups bbx bch beulv
 bnb boss bravo btc caja01 cardano carlos cc centos cgadmin chandra
 chrome chz client cm config crv csgoserver cts cuc dani daniel dante
 data database david db2inst1 debian debug deelip default degen demo
 deploy dev developer device devserver dgb diane dict ding dingtalk
 director dirk dls doge dot draytek droidbot dstserver dut dylan ebrahim
 ec2-user eddy edi edwin egor elaine elastic elasticuser emcali emmanuel
 emo engineer enter eos erika es esuser eth ethereum ev ezi fabian
 faisal fb fedora fil finance flectra flex frank frappe frappe-user
 freshlogs ftm ftp ftp1 ftpadmin ftpftp ftpsecure ftp_user ftpuser
 ftpusr ganga geek getosindex gf gino git git-admin gitlab glen gordon
 gr grace group1 gsy guest guest1 hadoop hammad hanna hansen harry hbar
 hehongju hello hengshi hexing hpcadmin hr hscroot huangzengli ian icp
 ict iman informatica instrument irina islam isp issabel jack james jan
 jang jason javad jenkins jgarcia jhlee jia jiang jiaxin jiayin Jirka
 jito jjm josh juyf kafka kali kamil kapil ke kevin keycloak kibana kip
 kira kirill kizzy kodi koha kong korea kumar lab laravel ldap ldo lee
 lekaren leo leon lighthouse lilei link liran lisa liujie lizhao lmi login
 loginuser lpadmin lsj ltc lwang lxz magento maintenance mana manager
 mantenimiento mapr marco maria mark marlin mary mashunshuai master matic
 matt mattermost maurice MC mc mcadmin me meta mgorman mina mma mob moh
 mohammad monitor moon mosquitto mostafa movie mustafa mutua myappuser
 mysql myvision nacos natasha near neerja network3 niko nina niraj nitter
 nmrsu noc node (none) normaluser notebook NSA nuno nutanix ODM office
 oleg omar oneadmin onlime_r op openhabian openstack operador operator
 ora11g oracle owner pablo pavel pawel payroll pc philip pi pivpn pk
 PlcmSpIp popo postgres prod prova prueba pw pwrchute python qqq qsrvbas
 qtum qwert rabbitmq rahel rajat rajeev red rede remote remoto renato
 reza roman root1 rosemary router rp RPM rsyncuser sa safeuser sam sammy
 samuel san sangoma saraswati scm scott sean secure sepehr server service
 sex sfserver sftp sftpuser shib shred shredstream shutdown simon slm
 snow snx sol solana solana-validator solx sonar souken special spider
 splunk squid sri ssh sshadmin staging steam steam1 stone student08
 student1 su suhail Sujan sumit sunny superuser supervisor support surya
 syou SYS sysadm sysadmin system tauro teamspeak tech telco telecomadmin
 telnet temp TEST test test1 test2 teste tester testuser theta thh tien
 tim tom tomcat ton toor tower transfer trx ts3user ubnt ubuntu uni
 uos upgrade usario usdc usdt User user user1 user99 Username username
 usuario vali validator vendas vet vhserver view vijay vishnu vm vnc
 vpn vps vpsuser wahid wangqiang wangyl wangyongxin wasadmin waseem web
 weblogic webserver weixifeng wg whmcs wireguard wp wsa www wyz x xbox
 xg xinyi xlm xmr xrdp xrp yah yanjie yc yee yen yos young ysz yuxiang
 yyy yyz yzy zc zdz zec zeinab zh zhangsan zimbra zx zyfwp zym zzh zzz