freshlogs is the concept
see https://www.freshlogs.ca/fl-ToS-Disclaimer.html
Use https://freshlogs.ca/index.txt for complete long lines.
Use https://freshlogs.ca/prev-index.d/ for previous posts.

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.  Added a
quick list of unique usernames from dictionary attacks.

Wednesday May 14, 2025

denied by configuration:

 1.25.18.18: 1 Time
 8.20.22.58 (8-20-22-58.hwccustomers.com): 1 Time
 12.156.67.18: 14 Times
 14.63.196.175: 15 Times
 14.103.41.249: 2 Times
 14.103.127.66: 5 Times
 14.103.132.8: 6 Times
 14.128.55.133: 11 Times
 34.126.114.239 (239.114.126.34.bc.googleusercontent.com): 1 Time
 34.151.198.59 (59.198.151.34.bc.googleusercontent.com): 12 Times
 35.130.111.146 (syn-035-130-111-146.biz.spectrum.com): 1 Time
 35.207.200.77 (77.200.207.35.bc.googleusercontent.com): 13 Times
 36.64.15.201: 1 Time
 37.152.177.164: 9 Times
 45.119.87.58: 1 Time
 45.127.120.34: 1 Time
 45.134.26.79: 28 Times
 45.135.232.92: 11 Times
 45.135.232.177: 31 Times
 45.148.10.67: 34 Times
 45.148.10.79: 23 Times
 45.170.248.137: 1 Time
 47.103.36.53: 1 Time
 47.236.29.244: 1 Time
 51.89.166.236 (vps-5f0ef624.vps.ovh.net): 13 Times
 51.178.43.161 (prod1.masterit.fr): 21 Times
 51.195.118.227 (vps-61067858.vps.ovh.net): 16 Times
 58.147.171.11 (58.148.171-11.aitlbd.net): 2 Times
 58.216.101.162: 1 Time
 64.23.255.160: 20 Times
 64.62.197.220 (scan-43i.shadowserver.org): 1 Time
 64.226.112.171: 1 Time
 65.20.210.33: 1 Time
 65.49.1.220 (scan-77-08.shadowserver.org): 1 Time
 68.183.197.105 (institutionalinvestors.co): 2 Times
 80.94.95.112: 53 Times
 80.94.95.115: 4 Times
 80.94.95.116: 10 Times
 80.94.95.125: 14 Times
 91.142.77.216 (v1033833.macloud.host): 1 Time
 92.118.39.61: 27 Times
 93.123.109.26: 1 Time
 96.1.40.151 (96-1-40-151-staticipeast.wireless.telus.com): 1 Time
 98.161.232.9 (ip98-161-232-9.ph.ph.cox.net): 1 Time
 102.164.208.179: 1 Time
 103.117.56.120 (ip103-117-56-120.cloudhost.web.id): 2 Times
 103.186.1.172 (ip103-186-1-172.cloudhost.web.id): 25 Times
 103.217.145.53 (ip103-217-145-53.cloudhost.web.id): 24 Times
 104.214.117.63: 2 Times
 106.12.153.108: 4 Times
 109.233.21.109: 1 Time
 112.30.7.45: 1 Time
 116.105.208.28: 4 Times
 116.110.19.25: 4 Times
 116.110.67.4: 3 Times
 116.110.91.150: 3 Times
 117.50.119.25: 9 Times
 117.50.184.161: 4 Times
 117.72.34.67: 2 Times
 117.128.86.100: 3 Times
 117.200.60.246: 1 Time
 118.122.93.139: 18 Times
 120.48.98.125: 2 Times
 121.15.177.173: 1 Time
 122.96.151.110: 19 Times
 122.148.199.165 (165.199.148.122.sta.wbroadband.net.au): 1 Time
 122.160.45.123 (abts-north-static-123.45.160.122.airtelbroadband.in): 24 Times
 122.166.46.151 (abts-kk-static-151.46.166.122.airtelbroadband.in): 1 Time
 122.166.253.226 (abts-kk-static-226.253.166.122.airtelbroadband.in): 1 Time
 122.187.229.99 (nsg-corporate-99.229.187.122.airtel.in): 1 Time
 123.143.205.62: 1 Time
 128.199.174.17: 21 Times
 129.148.21.13: 2 Times
 135.181.90.137 (static.137.90.181.135.clients.your-server.de): 21 Times
 139.59.64.179: 11 Times
 144.123.153.214: 1 Time
 148.113.172.199 (vps-c3b672a8.vps.ovh.ca): 1 Time
 153.211.224.97 (p3679097-ipxg12201sapodori.hokkaido.ocn.ne.jp): 1 Time
 156.233.233.67: 5 Times
 161.35.91.81: 6 Times
 167.99.128.177: 12 Times
 171.244.142.45: 1 Time
 172.174.72.225: 25 Times
 175.213.185.66: 12 Times
 177.174.106.155 (177-174-106-155.user.vivozap.com.br): 1 Time
 180.74.188.5: 1 Time
 180.184.160.246: 7 Times
 182.44.12.151: 18 Times
 185.93.89.118: 10 Times
 185.156.73.233: 4 Times
 185.156.73.234: 6 Times
 185.216.214.53 (ns3.servebeer.eu): 21 Times
 185.255.91.39 (static.39.91.255.185.clients.irandns.com): 25 Times
 186.94.113.189 (186-94-113-189.bto-03-p74.cantv.net): 1 Time
 187.212.39.217 (dsl-187-212-39-217-dyn.prod-infinitum.com.mx): 12 Times
 188.166.105.120: 23 Times
 190.119.198.81: 15 Times
 193.32.162.97: 35 Times
 193.32.162.137: 50 Times
 193.32.162.157: 15 Times
 194.0.234.16: 3 Times
 194.0.234.19: 9 Times
 194.0.234.107: 1 Time
 195.201.27.225 (static.225.27.201.195.clients.your-server.de): 11 Times
 196.251.88.103: 1 Time
 200.7.206.171 (mail1.ecuavisa.com.ec): 15 Times
 203.128.181.121: 1 Time
 211.117.144.194: 1 Time
 212.90.111.127: 1 Time
 213.55.85.202: 1 Time
 213.100.212.23 (c213-100-212-23.bredband.tele2.se): 1 Time
 213.113.51.251 (c-213-113-51-251.bbcust.telenor.se): 1 Time
 218.78.59.30: 3 Times
 218.156.176.223: 2 Times
 222.106.198.35: 1 Time
 222.120.176.6: 1 Time

system login attempted:

 sshd : 2 Times
 nobody : 1 Time
 root : 654 Times
 uucp : 1 Time

received disconnect:

  [preauth] : 301 Times
 Bye Bye [preauth] : 712 Times
 Bye [preauth] : 80 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 2 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "\376\aadminSSH-2.0-OpenSSH_7.4" : 1 Time
 error: kex_exchange_identification: read: Connection reset by peer : 18 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 4 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 4 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 4 Times

dictionary attacks: 521 unique usernames.

 123 1234 12345 123qweASD aaron abc abcdefg ada adam admian admin admin1
 administrador adrian ais ak alexis algorand ali alma almalinux aluno
 ambari ami amit amule andreas ang angga anonymous ansadmin ansible apolo
 applmgr appuser archive arduino arif aris ark arman asif aso avalanche
 avax baba backend backups bad bala bank basic bch bi bing bnb bogdan
 bot bpm btc btc1 btest bun cam cape casa centos certbot ceshi cf1c22
 charan chen chenhui chenjj chia chrism chz claudiu composeruser config
 construction contabilidad cps crap dal dan daniil danya dave dawn db2fenc
 dbadmin debian deep default delegate deluge demo demo3 denis deployer dev
 developer devil dgb diego django dmp doge dogecoin dora dot downloader
 dps droidbot dspace dst eacsaci ec2-user eddy ejbca elastic elastic1
 elasticsearch elise embedded emo en engineer eos erfan es es1 esuser eth
 ether ethereum ethereumdocker family faro farooq fedora felipe fengyun
 fil filecoin fivem flow flower flutter frappe free freelancer freshlogs
 frontend ftm ftp ftptest ftptest1 ftpuser ftpusr fw gabriel ganesh gaurav
 giorgio git gitlab-runner gituser giulia gts guest guest123 guido gwei
 gyli hadoop hajar hanna hannes hansen haoran haotian happy hassan hbar
 hdoop hengshi herman hh hieu hjseo hlw hong hrm httpd huang huangnenghai
 huawei hung hussein ibnu ice icp id images ingres ins install installer
 internal invoices io iqbal issabel itsupport jaewon jan javad jboss
 jenkins jeremy jhall jito john jperez julio justine jxt karimi kate
 ken khoa king lai laurent legion leo lfc lijy link lisa listd live
 liwei lobby login loginuser lotus ltc luciano luo maarch mahsa mapr
 mapred marian marjan mark marketing martin mas master material matic
 mc me meteo mgeweb mike minecraft mobiquity mohamad mohammad monitor
 mostafa mps musa mysql myuser nadmin nadya nagios near neeraj new newuser
 nexus nikhil nmm node nodered noel (none) notify npm nr nrk o2 odin odoo
 odoo15 oe omm oneadmin openhabian operator opsftp oracle orange osboxes
 osk pavan payroll pepe pi polkadot pop popo postgres pratik printer pro
 proceso profe profesor proj proxyuser PRUEBA prueba pterodactyl python
 pzuser q qn qtum qwe123 qwert r00t radmin rain rakesh ray raza rena
 reno rich richard rizki robert roberto rony router RPM rstudio rsync
 ruben rui saas sadmin samba samir sampsa sanjay sascha satis scan1
 scut sduran seeder serge serv server1 service servidor serwis sex sgc
 sham shared shib shoutcast shubham snort snx socksuser Sol sol solana
 solutec sonar sonarUser sonaruser soolana spooler squid ss sshadmin sss
 steam stp str student4 student7 summer supermaint supervisor suporte
 support surya sxf sybase syp tahir teamspeak telecomadmin telegram
 telegramapi tempuser ten teo Test test test001 test02 test1 test2 test8
 teste tester testproxy testserver testtest testuser testusr tg theta
 tibero tmp tomcat1 trade-bot trade.bot tradebot trx ts3 tt tu tushar
 tux ubnt ubuntu udin uftp uni unknown uno85 updates uploader usdc usdt
 user user002 user_1 user2 user62 user8 user9 user99 username usuario1
 utente valheim validate validator vcsa vet vf viper vishnu vlad vladimir
 vncuser VPN vpn vss vtatis vyatta w waleed we web3 will windows wist
 www wyz x xlm xmr xq xrp xt xyx yangjw yangx yesung yos yuval yy zan
 zec zeppelin zhangsan zhaolei zimblyeat zk zlz zn znc zs zzl