freshlogs is the concept
see https://www.freshlogs.ca/fl-ToS-Disclaimer.html
Use https://freshlogs.ca/index.txt for complete long lines.
Use https://freshlogs.ca/prev-index.d/ for previous posts.

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.  Added a
quick list of unique usernames from dictionary attacks.

Thursday May 29, 2025

denied by configuration:

 14.103.170.142: 5 Times
 18.208.214.58 (ec2-18-208-214-58.compute-1.amazonaws.com): 25 Times
 20.193.141.133: 22 Times
 27.254.235.4: 2 Times
 38.47.92.86: 24 Times
 43.252.229.139: 17 Times
 45.116.79.186: 23 Times
 45.120.216.232: 24 Times
 46.28.24.69: 1 Time
 49.229.72.68: 1 Time
 51.77.222.84 (mail.kerian-animals.fr): 19 Times
 51.195.46.102 (vps-7201bce5.vps.ovh.net): 24 Times
 57.128.182.5 (vps-e4cf1c1e.vps.ovh.net): 24 Times
 59.1.245.206: 2 Times
 61.72.55.130: 24 Times
 61.218.122.20 (61-218-122-20.hinet-ip.hinet.net): 2 Times
 64.62.197.190 (scan-42i.shadowserver.org): 1 Time
 64.227.25.214: 2 Times
 80.94.95.15: 49 Times
 80.94.95.112: 5 Times
 80.94.95.115: 16 Times
 80.94.95.116: 8 Times
 92.118.39.97: 36 Times
 103.132.243.250: 23 Times
 103.189.234.85 (syn-103-189-234-085.res.spectrum.com): 21 Times
 106.12.153.108: 3 Times
 107.0.200.227 (smtp.nationaltubesupply.com): 21 Times
 111.180.199.96: 22 Times
 112.17.139.236: 22 Times
 116.105.217.178: 4 Times
 116.110.28.24: 5 Times
 116.110.79.185: 5 Times
 116.110.120.161: 3 Times
 116.110.214.121: 5 Times
 116.110.214.165: 3 Times
 118.26.39.187: 20 Times
 120.48.98.125: 4 Times
 134.209.157.89: 22 Times
 136.27.51.200 (136-27-51-200.cab.webpass.net): 2 Times
 139.19.117.129 (inet-research-scan-5.mpi-inf.mpg.de): 9 Times
 139.59.93.217: 18 Times
 140.246.92.156: 4 Times
 152.53.250.238 (v2202504259908333598.powersrv.de): 24 Times
 154.84.153.50: 18 Times
 157.10.250.8: 5 Times
 157.180.66.16 (static.16.66.180.157.clients.your-server.de): 19 Times
 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time
 185.156.73.233: 8 Times
 185.156.73.234: 16 Times
 187.51.208.158 (187-51-208-158.customer.tdatabrasil.net.br): 23 Times
 187.157.23.247 (customer-187-157-23-247-sta.uninet-ide.com.mx): 21 Times
 190.109.66.68 (190.109.66.68.blinktelecom.com.br): 21 Times
 193.32.162.130: 17 Times
 193.32.162.136: 2 Times
 193.32.162.157: 5 Times
 194.0.234.19: 21 Times
 195.178.110.6: 48 Times
 197.5.145.44: 3 Times
 202.157.177.33 (mail.simaster-brebeskab.id): 24 Times
 203.194.114.144: 24 Times
 217.76.51.125 (vmi2562290.contaboserver.net): 24 Times
 218.145.181.48: 2 Times
 222.92.90.190: 24 Times

system login attempted:

 sshd : 1 Time
 backup : 2 Times
 daemon : 1 Time
 games : 1 Time
 nobody : 1 Time
 root : 451 Times
 uucp : 2 Times
 www-data : 4 Times

received disconnect:

 Bye Bye [preauth] : 950 Times
 Bye [preauth] : 54 Times
 drop connection #10 from [140.246.92.156]:36538 past MaxStartups : 1 Time
 drop connection #12 from [64.227.25.214]:33958 past MaxStartups : 1 Time
 drop connection #13 from [104.244.77.50]:46950 past MaxStartups : 1 Time
 drop connection #13 from [104.244.77.50]:46954 past MaxStartups : 1 Time
 drop connection #13 from [104.244.77.50]:46976 past MaxStartups : 1 Time
 drop connection #13 from [120.50.8.55]:48356 past MaxStartups : 1 Time
 drop connection #13 from [204.76.203.83]:60602 past MaxStartups : 1 Time
 error: Protocol major versions differ: 2 vs. 1 : 2 Times
 error: beginning MaxStartups throttling : 2 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" : 1 Time
 error: kex_exchange_identification: read: Connection reset by peer : 19 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times
 exited MaxStartups throttling after 00:02:02, 6 connections dropped : 1 Time
 exited MaxStartups throttling after 00:03:57, 1 connections dropped : 1 Time

dictionary attacks: 487 unique usernames.

 1 1111 1234 123456 a abelseth acer ada adam adm admin admin1 admin123
 Administrator administrator adrian alex alexandre alexis algorand
 alireza allinone alumno amber amember amin anaconda andrea angus
 anonymous antoine app arcgis arkserver arnborg array arun as asdf
 ashish asterisk auditor auto avalon avax backups barbara bastion bch
 bebe bitrix blake bnb brian brittany brooke bryan btc builduser byte
 cam camile carina carlos caroline cc cdr centos chase chatbot chz cisco
 clamav client clock cloud code cole composer composeruser condor config
 couch courtney cron123 crv cs2server cs2sv css customer cxwh cynthia
 daichuqu123 dangulo dani daniel danielle dat db2fenc1 db-ecn dci ddd
 debian debianuser deep deepti default deluge demo denis desarrollo dev
 developer development devin dgb dhcp diablo dima docker dog doge dokku
 dot ds9918 dsuser dummy ec2-user ecs edge edubook een egarcia elastic
 elasticbeanstalk elk elseach eos eric erin ermentrud esunny eth everdata
 faisal fil fiscal fran frank franklin frappe free freshlogs ftm ftp
 ftpuser ftpuser1 fuho fw g gabrielle game garrett geonode georg git
 github gokul gpadmin gsi guest guest2 guest_cm hack hacluster hamza
 hbar henry hlw holger httpd ian icp idf ingomar insight installer
 intel INTERNAL irene isabella ivan ivar jackson jacqueline jane janusz
 jarservice jason jay jboss jenna jennifer jesus jim jody jordan julia
 kali karim katelyn kevin kian kibana kimberly king kirstine kmiller
 kp kristina kristofvps laravel laura ldo leuze library lieselotte
 lighthouse liming link linux liyang log logan logviewer long lrendon
 ltc luis luna madeline manager manisha manoj manuel maria mark markm
 mary master mastodon matic matrix matthieu max me mechthilde media
 michael michelle minecraft minecraftserver minh minima mininet mk mmd
 mohamed mohsen mongo mongo123 mosquitto moth3r mw mysql nagios nathan
 near newadmin newspapper newusername nexus nginx nick nicole (none)
 nutanix ob ocean odoo15 onlime_r opc openhabian openvpn operator ops
 oracle orlando osama ospite ossadm ovhusr p2p pablo patrick peter pi
 postgre postgres prashant pre prexon prod project prueba pruebas psg
 pz qbtuser qody qtum qwerty r rafael rc rdp red redhat remi renata
 richard rke roberto root1 rootadmin roott rpm rusell ryan sahil sammy
 sandeep sanjay sanjeev sara sas satis sbin sc scanuser scsadmin sean
 sebastian seekcy self sergey server1 shib shipping shubham sierra sigrun
 sinusbot sistema sluper snx sol solana sqoop squid ssh steam stperez
 strycek student student1 student5 suejoe Sujan sumit support syncuser
 sysroot system taiga taiko teamspeak tech techuser test test01 test1
 test5 test6 testftp test-user test_user testuser theta tibero tigergraph
 titan titus tmpuser tokend tomcat tomcat8 toor trade trasnfer trevor trx
 ts ts1 ts3 tt tuan uat ubnt ubuntu uni unifi unixadmin usdc usdt user
 user02 user03 user1 user123 user13 user2 usera userftp usher usuario
 usuario2 uycqf valera vali vanessa vera vet vinay vincent vintagestory
 viper vision vladimir VPN vpn vpsuser vtatis webapp webapps weblogic
 webmaster web-user weewx Welcome@123 wengrace will wireguard wow wpyan
 www wwwdata xd xhagjika xlm xmr xq xrp xt xuhao yang ymachado yosep
 ypwang zabbix zec zgarci zh zhang zhangsan zhongwen zimbra