freshlogs is the concept
see https://www.freshlogs.ca/fl-ToS-Disclaimer.html
Use https://freshlogs.ca/index.txt for complete long lines.
Use https://freshlogs.ca/prev-index.d/ for previous posts.

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.  Added a
quick list of unique usernames from dictionary attacks.

Monday May 19, 2025

denied by configuration:

 14.103.140.142: 1 Time
 14.103.140.196: 5 Times
 14.103.237.195: 1 Time
 27.254.235.2: 9 Times
 36.105.205.231: 2 Times
 36.133.170.211: 3 Times
 37.17.107.209: 15 Times
 37.221.66.207 (tryskins.store): 2 Times
 38.43.93.252 (38.43.93.252.hostodo.com): 15 Times
 40.82.214.8: 10 Times
 43.153.40.3: 15 Times
 45.55.74.58: 2 Times
 45.134.26.79: 27 Times
 45.135.232.92: 12 Times
 45.135.232.177: 30 Times
 45.138.158.53: 14 Times
 49.7.230.246: 3 Times
 51.178.137.178 (vps-fe6c4481.vps.ovh.net): 11 Times
 59.19.182.197: 1 Time
 64.62.197.238 (scan-51l.shadowserver.org): 1 Time
 67.83.44.228 (ool-43532ce4.dyn.optonline.net): 1 Time
 74.48.116.24 (24-88-43-96-dedicated.multacom.com): 8 Times
 77.82.90.210: 13 Times
 79.106.73.114: 17 Times
 80.94.95.15: 5 Times
 80.94.95.112: 40 Times
 83.222.191.218: 1 Time
 92.118.39.57: 10 Times
 92.118.39.65: 10 Times
 95.58.255.251 (95.58.255.251.static.telecom.kz): 17 Times
 96.78.175.36: 1 Time
 98.159.108.170: 13 Times
 101.126.23.16: 14 Times
 103.55.36.22 (ip22.36.55.103.in-addr.arpa.unknwn.cloudhost.asia): 21 Times
 103.183.75.90 (ip103-183-75-90.cloudhost.web.id): 13 Times
 103.186.1.9 (ip103-186-1-9.cloudhost.web.id): 11 Times
 106.12.153.108: 4 Times
 106.58.166.77: 4 Times
 116.110.92.158: 4 Times
 116.110.93.35: 4 Times
 120.48.98.125: 2 Times
 128.199.20.225: 1 Time
 144.22.218.243: 2 Times
 146.70.157.72: 4 Times
 151.44.210.198: 2 Times
 165.227.116.76: 4 Times
 185.83.127.12: 1 Time
 185.93.89.118: 20 Times
 185.213.175.190: 11 Times
 186.233.208.13: 15 Times
 187.16.96.250 (mvx-187-16-96-250.mundivox.com): 13 Times
 187.110.238.50 (187.110.238.50.mobtelecom.com.br): 13 Times
 193.32.162.84: 15 Times
 193.32.162.136: 6 Times
 193.32.162.157: 5 Times
 195.178.110.26: 5 Times
 195.178.191.5 (h-195-178-191-5.NA.cust.bahnhof.se): 13 Times
 202.157.184.3: 19 Times
 222.96.182.227: 2 Times

system login attempted:

 bin : 1 Time
 daemon : 2 Times
 root : 434 Times
 sys : 1 Time
 www-data : 1 Time

received disconnect:

 Bye Bye [preauth] : 649 Times
 Bye [preauth] : 46 Times
 Disconnected from invalid user  80.94.95.15 port 44207 [preauth] : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 2 Times
 error: kex_exchange_identification: read: Connection reset by peer : 17 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times

dictionary attacks: 281 unique usernames.

 a aaa abc ada admin admingui adminuser alan alpine amyk andyk ara
 auktion b bintec bpm_admin brian bytenest_dev candy cardano cassandra
 cdx centos cgi changyicong chengweishao chenliang chenyoumin cm cmspmn
 config confluence csh cyx db db1 dbuser dcn debian debianuser demo
 dev devops discord dnsadmin docker dongmk downloader duci dxj ebupt
 ec2-user eckersley ensadmin enterprise erp es eth ethereum factory
 fedora freshlogs ftp ftpuser fuhao fyy gaobb gebf git gitlab gns3 gsy
 guest gzd hadoop halts hdfs highgo home homestad hp huxiao HwHiAiUser
 hypervisor image import info informix installer internet invitado iot j
 jiadayu jiangxiaohui jjw jmj john jqzhuang JUP jup kevint kmh kodachi kwx
 kzy lab l-admin ladmin latronce lcy liaolina lijiansong lilu lingzhang
 lisi liubin liuhai liujin lixin liyang lizepeng lizhiqi lj ljx lsc lw
 lx lxd lyli lz lzb mark mas master may mbo mckelvey miriam monitor
 mpadmin msfadmin myadm myh nagios ncadmin nesus netadmin netscreen
 nhcai NL5xUDpV2xRa nmsuser node nologin (none) noreply odin odoo omnisky
 openshift3 oracle oracletest owfadmin pc pcap personal plasma postgres
 prueba qhn qixl qpgmr query renkai replicator robert rzy samba sammy
 scdf scpftp shiluj shinerio sjw sme1 sol solana spark spider sql squid
 ssf st stone student student1 suguoyao support svnadmin sw sy symfony
 taozhuo telecomadmin temp tenest test test01 test1 test10 test123 test3
 test4 teste tester testftp testing testuser themes tjq todadmin ton
 trx tw_admin ubnt Ubuntu ubuntu ubuntu1 user user2 v2 vali validator
 vmail vpn vps wang wangjs wangsheng wangtao wangyp wangziqi webframe
 webmysql wjm wocloud wsman wuyuewei wwwint wxz wy x xrq xts xwang xyn
 yangliu yangming yanliang yanmengxiang yining yinmeng yinsisi youyanan
 ysy yxs zd zeken zhanghuilong zhangkai zhangqing zhangyw zhaochen zhh
 zhouhonghong zjj zl zlwang zt zxh zyy