freshlogs is the concept
see https://www.freshlogs.ca/fl-ToS-Disclaimer.html
Use https://freshlogs.ca/index.txt for complete long lines.
Use https://freshlogs.ca/prev-index.d/ for previous posts.

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.  Added a
quick list of unique usernames from dictionary attacks.

Thursday June 5, 2025

denied by configuration:

 5.182.83.231 (undefined.hostname.localhost): 24 Times
 14.103.115.124: 5 Times
 14.103.118.208: 3 Times
 35.210.61.208 (208.61.210.35.bc.googleusercontent.com): 24 Times
 39.106.156.142: 1 Time
 42.123.123.59: 3 Times
 43.224.48.86: 23 Times
 45.11.94.239: 24 Times
 54.38.79.136 (vps-5519d93b.vps.ovh.net): 24 Times
 58.42.204.29: 1 Time
 65.49.1.241 (scan-79-09.shadowserver.org): 1 Time
 79.194.197.247 (p4fc2c5f7.dip0.t-ipconnect.de): 2 Times
 80.94.95.15: 32 Times
 80.94.95.112: 32 Times
 80.94.95.115: 6 Times
 80.94.95.116: 9 Times
 85.250.198.126 (85-250-198-126.bb.netvision.net.il): 2 Times
 101.126.25.120: 1 Time
 103.75.162.154: 2 Times
 103.96.72.233: 22 Times
 103.145.145.80: 24 Times
 103.176.79.139: 2 Times
 103.193.176.112 (ip103-193-176-112.cloudhost.web.id): 27 Times
 103.226.139.21 (idcloud1.vlavano.live): 23 Times
 106.12.153.108: 3 Times
 106.51.1.63 (106.51.1.63.actcorp.in): 9 Times
 107.172.16.161 (107-172-16-161-host.colocrossing.com): 25 Times
 109.167.197.20 (109-167-197-20.westcall.net): 9 Times
 111.67.199.209: 3 Times
 111.173.89.134: 1 Time
 115.241.83.2: 22 Times
 120.48.98.125: 5 Times
 121.227.152.250: 4 Times
 122.35.192.61: 24 Times
 125.21.59.218: 23 Times
 134.209.149.177: 138 Times
 138.68.81.80: 24 Times
 138.197.133.98: 49 Times
 142.93.196.54: 11 Times
 150.136.76.116: 187 Times
 152.32.172.5: 18 Times
 154.217.245.201: 1 Time
 157.230.105.227: 1 Time
 158.174.211.17 (h-158-174-211-17.NA.cust.bahnhof.se): 12 Times
 159.89.178.71: 4 Times
 164.132.7.54 (ip54.ip-164-132-7.eu): 24 Times
 177.182.181.8 (b1b6b508.virtua.com.br): 24 Times
 185.93.89.118: 5 Times
 185.156.73.233: 10 Times
 185.156.73.234: 7 Times
 185.213.174.209: 25 Times
 188.148.148.109 (c188-148-148-109.bredband.tele2.se): 2 Times
 193.32.162.157: 5 Times
 194.0.234.19: 6 Times
 194.0.234.93: 1 Time
 195.88.120.62 (195-88-120-62.parustelecom.ru): 1 Time
 216.155.93.75: 24 Times
 217.208.209.238 (217-208-209-238-no3440.tbcn.telia.com): 2 Times

system login attempted:

 sshd : 3 Times
 games : 1 Time
 mail : 1 Time
 man : 1 Time
 nobody : 1 Time
 root : 572 Times
 sync : 1 Time
 sys : 1 Time

received disconnect:

 Bye Bye [preauth] : 779 Times
 Bye [preauth] : 53 Times
 drop connection #13 from [111.173.89.134]:52510 past MaxStartups : 1 Time
 error: Bad remote protocol version identification: 'SSH-2.0_CoreLab-1.0' : 1 Time
 error: beginning MaxStartups throttling : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 3 Times
 error: kex_exchange_identification: read: Connection reset by peer : 16 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times
 exited MaxStartups throttling after 00:01:42, 1 connections dropped : 1 Time

dictionary attacks: 581 unique usernames.

 + ???  0 1 12345 abhinav accelrys acontat acs actions adc adele adm
 admin admin1 adminftp Administrator adminuser adonis adrian adrien
 afa ahmed aida aion airlync akadata alex alexandrie algorand almalinux
 amanda amandabackup ambari-qa amine amits ams anas andrew andy angelina
 anon anonymous ansible anton aovalle applprod appuser apulis arch ardor
 arkserver arnold arthur arundhati asd asdf ashish asus austin avalanche
 avinash Azure backman bai baixue base bazy02 bethany billing bingguo
 biryuu bitnami book bot bot3 brenda buildbot butter c2 ca caja01 canvas
 cardano cat cbfu cd celeryuser celo cenagro centos chandler changyuqing
 chat cheeki chencf2 chenchucheng chenyang chenyuxing chiewyea chrism
 cindy cisco cl client003 cloud cm cmuir config confluence contact
 controlm cosmos cq crafty cristo crn cronos csgo cuiyili cynthia cyrus
 czm dachuang daniel daniela dash david dbc dbuser dcase debian debianuser
 deborah decred dehaze demo dennis deploy deployer deployhq desco detlef
 dev develop development devman devserver devtest devuser dhcp diamond
 diquest discord distro django dmitriy dmsjk docker dokku dolphinscheduler
 dsodb duao dusan dxp edgar elasticsearch elrond emmanuel emp1 energyweb
 enomor eoffice eos eric eris erp erpnext es es1 es_user ethereum etienne
 eva eversec expert exploit fangchunying fangxu fantom fastuser fbs
 feng ferrari filippo fivem fk flow fm frappe frappe-user freshlogs ftp
 ftpadmin ftpguest ftp_ommm ftproot ftptest ftp-user ftpuser ftpusers
 fuyuan fw fxcftp galano game gameserver gczhang gejian geoeast gerrit
 gf ghostcms git git_argus gitlab gitlab-runner gjn glassfish gmodserver
 go gs_dianxin2025_2 guest gunner h2comm hadoop hanoop hari harmony hdfs
 helium hello hisafumi hli hostinger hrm hrzhu httpfs ibm icon idempiere
 igor image ims in info informix inspur invitado ionadmin iptv jack jakob
 jamie jane javad jenkins jennifer jerry jing jinxinn joao joe joomla jose
 josiah julien junmuzi K kaitlin kamera karen karina kathryn kava kettle
 kevin kibana kii kjerstin kocom kong kristin kusama kzh5420de lab levi
 lfs licongcong lidl lighthouse lihyuy linaro litecoin liutie ljy lpoli
 maint malik manchego manuel mapadmin marc marco maria mariadb mario
 martin marvin master mathias mazeaud mc mcserver me mega mehdi merit
 michaela michel min minecraft mininet minnie misha mit mj mm monitoring
 moonbeam morteza mw myshake mysql myuser nabi nagios nas nathalia nb
 near neutron newspapper nextcloud nginx nikita nishant NL5xUDpV2xRa
 nocadmin nodeproxy (none) noreply nsroot nushi nutanix nxt odoo12 odoo15
 odroid omi omid openeuler operator ops oracle osbash ossuser oxidized
 palworld paris paypal payton pc pedrito pgadmin pgsql phoebe pi pivpn
 play polkadot polygon pop portal2 postfix postgres postgresql pratik
 printer PRUEBA prueba Q quant qwe qwerty radio ramon rasa ravencoin
 readonly redis remote renxueshuang riad roger root11 RPM ruoyi rustserver
 sa safeuser sales salim samara sammy sarah secret secured seekcy selenium
 semik serena sergio server server1 sftp sftpuser shannon shijunyu shin
 siacoin simon singh site soa sofia sol solana solr sonar sophie soporte
 source spark spider spider8root spring squid srv sshadmin sshtunnel
 steam stefano stellar stratis student superadmin supervisor support
 sysbackup syscoin systems teampspeak3 teamspeak teamspeak3 telecomadmin
 telkom temp tempo tempuser terra terraria test test1 test123 teste
 testuser tez tezos theresa timothy titan tmax tomcat tomtest ton toto
 training trc trenton tron ts ts2 ts3 ts3bot ts3server tsugahara tuan u1
 uat ubnt ubuntu ubuntuserver ucpss uftp upload urban User user user1
 user12 user2 user5 user6 user7 useradmin userlogin username userroot
 usher usuario2 vagrant valeria vechain ventas05 vhserver voices vpn
 vpnsvc vpopmail vpsuser vyatta vyos wave waves web7 weblogic webmast
 wesley wfp wiki wildan will wocloud wordpress worker wt wuhan www www1
 wxg x xdc xiangyu xila xoadmin xrp xsw xx yarn yinniapp yoshiri yunus
 yuxiang zabbix zc zcash zh zilliqa zjh zy