freshlogs is the concept
see https://www.freshlogs.ca/fl-ToS-Disclaimer.html
Use https://freshlogs.ca/index.txt for complete long lines.
Use https://freshlogs.ca/prev-index.d/ for previous posts.

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.  Added a
quick list of unique usernames from dictionary attacks.

Friday June 6, 2025

denied by configuration:

 14.103.75.9: 7 Times
 14.103.112.106: 24 Times
 14.103.117.88: 23 Times
 14.103.118.200: 17 Times
 14.225.3.79: 5 Times
 16.162.105.251 (ec2-16-162-105-251.ap-east-1.compute.amazonaws.com): 26 Times
 38.43.93.252 (38.43.93.252.hostodo.com): 18 Times
 46.101.210.71: 2 Times
 49.13.116.157 (static.157.116.13.49.clients.your-server.de): 22 Times
 50.62.183.24 (24.183.62.50.host.secureserver.net): 24 Times
 51.77.246.7 (ns3139592.ip-51-77-246.eu): 4 Times
 60.234.135.20 (dynamic.skybb.net.nz): 2 Times
 65.49.1.223 (scan-78-01.shadowserver.org): 1 Time
 80.94.95.15: 45 Times
 80.94.95.112: 16 Times
 80.94.95.115: 13 Times
 80.94.95.116: 15 Times
 81.68.220.232: 23 Times
 83.235.16.111 (goevthes.static.otenet.gr): 10 Times
 85.208.139.157 (55363.ip-ptr.tech): 24 Times
 89.152.55.51 (a89-152-55-51.cpe.netcabo.pt): 5 Times
 101.126.70.177: 3 Times
 101.126.90.24: 3 Times
 103.210.31.94 (host103-210-31-94.renubroadband.com): 4 Times
 103.230.120.238 (rdns.bangmod.cloud.120.230.103.in-addr.arpa): 22 Times
 106.12.153.108: 3 Times
 106.15.238.36: 1 Time
 116.71.135.53: 19 Times
 116.98.160.157 (dynamic-ip-adsl.viettel.vn): 5 Times
 116.110.71.48: 4 Times
 116.110.84.152: 4 Times
 116.110.89.130: 4 Times
 116.117.10.110: 3 Times
 116.255.156.120: 2 Times
 117.50.51.198: 18 Times
 120.48.98.125: 5 Times
 121.227.31.13: 16 Times
 134.199.195.11: 56 Times
 134.209.149.177: 62 Times
 136.27.51.200 (136-27-51-200.cab.webpass.net): 2 Times
 137.184.91.50: 24 Times
 150.136.76.116: 191 Times
 152.32.129.136: 5 Times
 154.92.111.94: 1 Time
 154.144.225.226: 6 Times
 158.174.211.17 (h-158-174-211-17.NA.cust.bahnhof.se): 6 Times
 164.90.151.202: 1 Time
 171.251.18.96 (dynamic-ip-adsl.viettel.vn): 4 Times
 171.251.21.94 (dynamic-ip-adsl.viettel.vn): 1 Time
 171.251.29.233 (dynamic-adsl.viettel.vn): 3 Times
 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time
 175.139.200.245: 21 Times
 181.49.178.6: 22 Times
 183.4.22.153: 1 Time
 185.156.73.233: 11 Times
 185.156.73.234: 11 Times
 192.241.131.41: 6 Times
 193.32.162.145: 34 Times
 193.32.162.146: 14 Times
 193.32.162.157: 5 Times
 194.0.234.19: 14 Times
 194.0.234.93: 1 Time
 194.152.206.17: 25 Times
 196.92.7.246: 6 Times
 196.92.7.247: 4 Times
 196.92.7.249: 6 Times
 198.23.143.193 (royaserver.com): 17 Times
 202.157.176.210 (mail.magis.id): 25 Times
 211.199.177.196: 3 Times
 219.147.74.48: 25 Times
 221.213.129.46: 23 Times

system login attempted:

 sshd : 1 Time
 nobody : 2 Times
 root : 810 Times
 uucp : 2 Times
 www-data : 2 Times

received disconnect:

 Bye Bye [preauth] : 968 Times
 Bye [preauth] : 68 Times
 error: Protocol major versions differ: 2 vs. 1 : 3 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times
 error: kex_exchange_identification: read: Connection reset by peer : 22 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times

dictionary attacks: 633 unique usernames.

 1 1111 123 1234 1p 7days a aaa aadhya aakanksha aarav aave abc
 abc1 abigail abraham account actions activemq ada adam aditya adm
 Admin admin admin123 administrador Administrator administrator alan
 alejandra alex alexander alexandre alexia alfresco algorand alice alicia
 almalinux amir amp andy ang anil anna anon anonymous ansadmin Anssi ao
 apagar app arcgis argus_git arkserver array ashish aster audit auditor
 automation autoupdater avax avery aws Azure b backups bash bayu bbbian
 bch beihang biadmin bianca bitrix bjzk1 blog bnb bnt bodega book boss
 bot bot1 brady brenda brilauer brooklyn bryan btc btt build builder
 bwadmin c caizhongbin canvas caojingyi caoxiaojing carlos carly casey
 cash cdr cecilia celery centos cgadmin cgi-bin chaimengxin changhao
 cheeki chenguang chenhui chenk chensen chris christian christine chsm
 chui chz cindy cisco cjwu clamav cloud cmsp2 codis config conner
 connor copia crafty crm crv cs2server csgoserver customer cvmfs cx
 cxd dai dan daniel data db2dasusr1 db2fenc1 db2inst1 dbadmin dbuser
 ddd deamon_root debian default demo deploy deployer deployment desliga
 dev dev1 develop developer dgb digibase dirsrv distro dl dm docker doge
 donald dongjianhua dot dq804 drcomadmin drew DSL ec2-user eclipse edubook
 een elastic elasticsearch elemental elena elk enjin eos eric erick
 erpnext es est esunny esuser eth ethos etienne eva fa factorio faisal
 fangchengyan fedora fenglongfei fernanda fgu fil filippo filter finance
 fivem fluqueta founder foundry fred freelancer freshlogs frontrow fsf
 ftm ftp ftp1 ftp2 ftp_admin ftptest ftpuser ftpuser1 fu furry fuyahui
 ganesh gaohaihua gaoqiang gaoyong gbase geo george gerrit geyser ggg
 ghost git github gitlab-runner gmst gpu02 grace grid groupc guest hack
 hacluster hadoop halo halt hamed hammad hamza hanna harrison hbar hbase
 hdoop hector henry hik hnt hostinger huawei hvwyi hy icp image import
 incoming info insight installer intel jabber jackett janet jay jboss
 jeff jellyfin jenkins jeus jimmy jing jito jmarquez joao jochim john
 jonah jonas jstorm jupiter kafka kai kali karen kashan kevin keycloak
 kim kocom kubeadmin kulwinder kunitaro lab laura lay ldo leavelle leo
 lhj lienhart liming lin link linuxadmin liyang log loguser lol lrc ltc
 luca luciano luosx lurline m202 magento mailuser manager manoj margaret
 mart mary mastodon matic matichosting matrix max mcadmin mckelvey
 medina mehdi micah michael minecraft miner mint misha mkr mohit mohsen
 momoka monica monitor mosquitto mp mtcl mw mya myjo mysql nabi nagios
 nas nb near newuser nextcloud nexus nikolay ninliu2 nishant nlp node
 nolan nominatim (none) nutanix nvidia O odin odoo ollama one onlime_r
 openeuler openproject operator ops oracle oramid10g ospite ossadm ovh
 oxidized pablo paide patrick patrol paul pavel pc peak perlin peter
 peyton pi pierre piotr postgres postgresql pratik proftpd prometheus
 prowlarr prueba psg psybnc pt pubsftp pzuser qemu qiuhan qtum r00t
 racz readonly rebekah redhat redis reef remote ren reza rider rig
 rke rkuemon roberto robin rocky rom roo rootadmin rooter rootftp rose
 rsync runner rust sa sabina sam samba sambauser sand sandbox sc scout
 sdbadmin sdj seafile seki server server2 sfserver sftptest shannon shib
 shredstream shungyosai sim sinusbot sistemas skaner smart snx soa2 sol
 solana solv spark speedtest spring squid ss ssn stack steam stefano
 storm strapi student student2 stx Sujan sunil superadmin supervisor
 support sushi sysman system systems syx t128 tamaha tan tbj tcpdump
 td teamspeak tech tejas telegram test test1 test2 test5 teste tester
 tester1 testing testuser tez tfeng theta thomas tidb tim tmp tmp2 toby
 tomcat tomcat7 tommy trader trading trx ttx ty tyson uat ubnt ubuntu
 ubuntuserver uni unified upload usdc usdt user user001 user02 user03
 user09 user1 user11 user123 user6 user7 useradmin user-backup username
 usman usuario usuario1 usuario2 vagrant valerie validator vastbase vbox
 vector ventas05 vet vhpadmin victor vijay vincent vitamdb vpn vpnsvc
 vyatta wafer web weblogic webportal webservd wen wiki wsq wuhan www x
 xc xcm xguest xlm xmr xrp xs xt xtremx xxx yang yangy yaroslav yekta
 youssef yue zabbix zec zhou zimbra zmarin zomboid zookeeper zrx zstack