freshlogs is the concept
see https://www.freshlogs.ca/fl-ToS-Disclaimer.html
Use https://freshlogs.ca/index.txt for complete long lines.
Use https://freshlogs.ca/prev-index.d/ for previous posts.

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.  Added a
quick list of unique usernames from dictionary attacks.

Saturday May 24, 2025

denied by configuration:

 8.222.128.242: 1 Time
 14.103.117.84: 3 Times
 14.103.118.121: 1 Time
 20.12.41.6: 11 Times
 27.112.78.170 (ip27-112-78-170.cloudhost.web.id): 15 Times
 34.175.118.185 (185.118.175.34.bc.googleusercontent.com): 10 Times
 36.67.70.198 (sehati.tanjabtimkab.go.id): 2 Times
 37.204.226.204 (broadband-37.204-226-204.ip.moscow.rt.ru): 18 Times
 39.156.156.153: 4 Times
 45.8.46.60 (mail2.zebje.com): 18 Times
 45.134.26.79: 15 Times
 45.135.232.92: 6 Times
 45.135.232.177: 20 Times
 50.174.125.2 (c-50-174-125-2.unallocated.comcastbusiness.net): 1 Time
 61.246.255.203: 11 Times
 64.62.156.86 (scan-65-6.shadowserver.org): 1 Time
 65.49.1.127 (scan-68-05.shadowserver.org): 1 Time
 73.135.38.134 (c-73-135-38-134.hsd1.md.comcast.net): 23 Times
 80.94.95.15: 8 Times
 80.94.95.112: 20 Times
 80.94.95.241: 12 Times
 81.70.79.32: 11 Times
 82.200.218.83 (behemoth.shymkent-online.kz): 20 Times
 82.208.85.193 (82-208-85-193.static.mts-nn.ru): 2 Times
 101.89.109.115: 5 Times
 103.146.159.74: 2 Times
 106.12.153.108: 3 Times
 106.75.88.44: 3 Times
 114.219.157.97: 2 Times
 116.98.169.43 (dynamic-ip-adsl.viettel.vn): 4 Times
 116.105.223.195: 5 Times
 116.120.58.231: 1 Time
 117.50.188.36: 2 Times
 118.122.147.195: 11 Times
 118.179.219.137: 9 Times
 120.48.98.125: 4 Times
 130.195.222.154: 3 Times
 130.195.222.157: 2 Times
 142.93.116.14: 19 Times
 151.95.9.145: 4 Times
 152.32.215.203: 14 Times
 159.89.190.96: 4 Times
 160.187.40.114: 2 Times
 167.99.74.18: 23 Times
 176.109.80.72: 14 Times
 178.128.121.189: 20 Times
 179.33.210.213: 15 Times
 180.101.143.248: 16 Times
 185.93.89.118: 5 Times
 185.157.223.126 (185-157-223-126-static.glesys.net): 7 Times
 188.166.217.79: 17 Times
 193.32.162.135: 26 Times
 193.32.162.136: 2 Times
 193.32.162.157: 5 Times
 202.4.102.249: 12 Times
 219.152.170.58: 13 Times
 222.73.135.240: 1 Time
 223.241.247.214: 2 Times

system login attempted:

 root : 393 Times

received disconnect:

 Bye Bye [preauth] : 682 Times
 Bye [preauth] : 57 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.0" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times
 error: kex_exchange_identification: read: Connection reset by peer : 18 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 4 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 4 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 4 Times

dictionary attacks: 286 unique usernames.

 123123 abbas adc admin administrator adolfo ahmed alex alexis ali
 alireza aliyun alvaro amalia andrey API apps appuser arkserver asd axel
 backend backuponly backuprestore backups bacula bitrix bitwarden bot
 bot3 bp cacti caja2 centos certftp cheeki china chuang clock config
 couch csgoserver csuser customer dambrosio daniel db2inst1 debian
 delegate demo deng deployer desktop dev developer dns dockeruser don
 dvd elasticsearch energy eric erika es ether ethereum ethereumdocker
 events fiscal foobar freshlogs ftp ftp_client ftpsecure ftptest
 ftpuser game gaoyx gerrit ghost gino git gitlab gituser gns3 gongzhan
 gpuadmin guest gustavo gwei gyli hadoop hans hh hhd hoo hostinger hp
 huangmin Huangzh huawei hxzq hy incoming info installer isoadmin itv
 james jenkins jira jjw john jose jp kafka kalilinux kariman kiran kyu
 librenms lijun linga liu liuxx liuyijiang liwp liyang logstash ludmila
 luoman mama manual mapr maria mario marvin me mika minecraft ming mmd
 mohamad mohamed mohammad mohammed mongodb moodle muhammad mysql nagios
 netadmin nexus NL5xUDpV2xRa node nologin (none) noreply nushi ociistst
 odoo12 off omnisky oneadmin onlyoffice oracle oracle2 owner paolo parrot
 pengliang PlcmSpIp pma polkadot postgres prashant pritchard public pvx
 qwert qwerty radius raojia receive remote rico rigo rock roott rsync
 rtc said saif sammy sas scheduler scott scpuser share sinusbot sol
 solana soporte speakin squid sshuser sslvpn staff staging steam strapi
 strona stud1 student student1 sumit support svn swap syl syncuser syp
 sysadmin system systemd teamcity teamspeak telnet temp tempuser test
 test1 test2 teste tester testuser tianpengyu tiptop tmax tom ts3 ty u
 ubuntu user user02 user1 user2 user8 useradmin username usuario utente
 uth uzivatel v2 vagrant validate validator vianmj vintagestory vmware
 vpn wanghy web web3 webadm wedding wei wg will wordpress workcon wow
 ww xander yan yangxu zabbix zak zhang zhaop zhzhang zj zlp zlx