freshlogs is the concept
see https://www.freshlogs.ca/fl-ToS-Disclaimer.html
Use https://freshlogs.ca/index.txt for complete long lines.
Use https://freshlogs.ca/prev-index.d/ for previous posts.

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.  Added a
quick list of unique usernames from dictionary attacks.

Sunday June 8, 2025

denied by configuration:

 24.45.135.64 (ool-182d8740.dyn.optonline.net): 4 Times
 27.254.235.1: 3 Times
 36.139.226.237: 5 Times
 45.135.232.92: 16 Times
 46.238.32.247 (ip-46-238-32-247.home.megalan.bg): 21 Times
 47.74.51.79: 1 Time
 47.236.97.41: 1 Time
 50.225.176.238: 20 Times
 62.133.63.98 (4s-4-tg-1710336593.ip-ptr.tech): 14 Times
 64.62.156.117 (scan-67-9.shadowserver.org): 1 Time
 64.225.55.168: 27 Times
 80.94.95.15: 47 Times
 80.94.95.112: 33 Times
 83.234.160.50 (chita.vtb.ru): 23 Times
 101.89.122.25: 4 Times
 101.100.220.34 (v22351305.sin01.serveradd.com): 25 Times
 103.23.199.49 (ip103-23-199-49.cloudhost.web.id): 9 Times
 103.76.120.90: 6 Times
 103.91.136.18: 8 Times
 103.153.141.147: 4 Times
 103.229.125.164: 27 Times
 110.49.30.83: 5 Times
 111.31.14.77: 1 Time
 116.105.213.217: 3 Times
 116.105.221.162: 2 Times
 116.105.221.185: 5 Times
 116.110.28.148: 1 Time
 117.9.171.171 (dns171.online.tj.cn): 2 Times
 118.194.230.231 (vinfeshop.com): 21 Times
 120.48.98.125: 6 Times
 120.50.8.55 (ws53-cashlink-bn-ac1-p14.telnet.com.bd): 25 Times
 121.2.72.105 (p024869.kngwff01.ap.so-net.ne.jp): 15 Times
 121.142.87.218: 22 Times
 122.156.167.62: 25 Times
 123.58.213.127: 18 Times
 150.136.76.116: 191 Times
 150.136.129.10: 27 Times
 153.99.92.11: 2 Times
 154.90.50.55: 8 Times
 154.210.129.37: 23 Times
 154.221.20.133: 1 Time
 159.65.133.180: 9 Times
 161.35.21.48 (movecenter-movecenter.eu): 20 Times
 171.244.37.103: 18 Times
 171.244.134.21: 15 Times
 180.74.195.122: 21 Times
 181.49.117.132: 6 Times
 185.93.89.118: 5 Times
 185.172.102.46: 2 Times
 188.166.105.120: 22 Times
 192.227.248.232 (192-227-248-232-host.colocrossing.com): 4 Times
 193.32.162.157: 5 Times
 194.0.234.124: 1 Time
 196.251.88.103: 5 Times
 197.199.224.52 (host-197.199.224.52.etisalat.com.eg): 6 Times
 203.205.37.233 (static.cmcti.vn): 4 Times
 206.172.46.162: 25 Times
 210.79.142.221: 23 Times
 210.91.73.167: 22 Times
 213.165.85.145 (ip213-165-85-145.pbiaas.com): 25 Times
 220.203.12.53: 5 Times

system login attempted:

 sshd : 1 Time
 systemd-timesync : 1 Time
 daemon : 1 Time
 games : 2 Times
 news : 1 Time
 root : 594 Times
 www-data : 3 Times

received disconnect:

 Bye Bye [preauth] : 885 Times
 Bye [preauth] : 94 Times
 drop connection #10 from [182.44.72.96]:57928 past MaxStartups : 1 Time
 error: beginning MaxStartups throttling : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 5 Times
 error: kex_exchange_identification: read: Connection reset by peer : 18 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times
 exited MaxStartups throttling after 00:03:25, 1 connections dropped : 1 Time

dictionary attacks: 544 unique usernames.

 " 1234 123456 a aai aban abdulquddus abiad1 abraham account acct adc
 adempiere adm admin admin1 admin123 admin1234 administrator adrian
 afa airbot airflow aksoftin alex alice alin alluxio amaya amine amits
 amssys andrea andy anna ansadmin ansible anthony apagar api appadmin
 appluat arma3srv arthur as asdf auditor aurel autrede avinash b baba
 barman bcs beat benke bie bitnami bitwarden bkp bodega boris bot botnet
 bridge bs build builduser cade calvin campus canvas caoliang caozhe
 carlos castle celeryuser ceshi chaicq chance changfl changlong chengyw
 chenjingwen chenruidong chenx chuang ciisr cjq claudia cloud cmhealth
 cmm cmss cnc ConfBack_user config confluence couchdb cpf customer cwx
 cxchen cyber damian daniel dasusr1 db2admin db2inst1 dbuser debian
 debianuser default demo demouser dengkeyue deploy deployer desliga dev
 devel develop developer devops dh diella diradmin distro dlcao dmdba
 dns dockeradmin dog dolphinscheduler domeke donald donovan download
 drupal dspace dstorage dummy echo egarcia elasticsearch elena eric
 eris erlei erp erpnext es es1 esmeralda esuser evelyn exx F factura
 fanbin1448 Faruk fastuser fengguo fh filippo fivem fleek fletcher
 frank frappe frequency freshlogs frontend ftp ftp1 ftpadmin1 ftp_client
 ftpname ftptestusr ftp-user ftpuser ftpusr funa fuuya fuyn game gaomi
 gaoxuebo gaoziqiang gbasedbt gbd gdjc gerardo ghm gilles ginie gino git
 git2 gns3 gokul gpadmin gpu groupb gta guest hack hai harrypotter hawu
 hdfs hduser highgo hisanobu holly home hop htfront huwanfeng icecast
 idempiere ignite import info installer ir it james jane jasmin jboss
 jeff jellyfin jenkins jennifer jerry jessie jht jim joe john joseph
 julie junter kafu kali kangxingyuan kara karan kelly kendall kevin
 khalid kibana kim kk kora kp kuria kylee ladmin latronce lch leo lfs
 linux logan logger logviewer lrendon lucas lucy luis lyle mac magdalena
 maggie mai7 main maint makenzie manager mani manoj mariadb mary mason
 master mastodon matt mc mckenna mcsurvival mehdi meira mgeweb miladmim
 minh mitchell mk mm mohamed monerod monitor morteza mosquitto moth3r
 mother mrodelo mtcl multicraft musa mwang2 mysql N nasrin new newuser
 newusername nexus nicholas nicolay nicole nikhil nikita NL5xUDpV2xRa
 nobuteru (none) ob ociistst odoo odoo13 old omega oneadmin onlime_r opc
 open openlava openvpn operator ops oracle orangedev ossadm oxidized
 pandora patric patrick patrol payara pedro peertube perry phpmyadmin
 ping postfix postgres pp pradeep pratik prowlarr proxyuser PRUEBA prueba
 publicuser pzsrv pzuser qia qie qwerty r rc readonly red redis remote
 reza2 riad rich rico riza rke role1 root2 rootadmin rooter rosana ruben
 runcloud rust ryan sa sales sales1 scaballa scpuser scsadmin sean secret
 security segteam selena selenium server service sftp sh shin shiny
 shuncho simple SinusBot sitech sizhizhong sms solar sonar sonarqube
 spectrum spring squid ssh stack steam stian strapi student student1
 student2 student6 super supermaint support svet syamsul syncthing
 syncuser sysadmin sysconfig sysmon sysop system takuzou tamy tatyana
 te teamcity teamspeak3 techuser telecomadmin temp terraria test test1
 test123 test3 testa teste testing testtest theta thorben tidb titus tk
 tlq tomcat tomcat9 tot toto toyotomi training trey trygve ts1 ts3srv
 ttx ty u ubnt ubuntu uftp upload urens User user user01 user07 user1
 user10 user11 user12 user2 useradmin userftp user_jenkins username
 usertest usuario uzivatel vagrant victor vijay vinay vlad vpn vpn1
 vpnsvc vpnuser vscode wafer wang web web-admin webadmin webdev webops
 webuser webwasb white wildfly william windows wireguard wow www xbot xg
 xguest xiao xkuser2 xq xt yangy yoko yondyang yuxiang yy zabbix zhaoxj
 zheng zookeeper zxin10