freshlogs is the concept
see https://www.freshlogs.ca/fl-ToS-Disclaimer.html
Use https://freshlogs.ca/index.txt for complete long lines.
Use https://freshlogs.ca/prev-index.d/ for previous posts.

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.  Added a
quick list of unique usernames from dictionary attacks.

Tuesday June 10, 2025

denied by configuration:

 2.99.212.192 (host-2-99-212-192.as13285.net): 22 Times
 5.175.249.71: 4 Times
 12.189.234.28: 23 Times
 14.103.63.16: 22 Times
 14.103.91.55: 4 Times
 14.103.92.40: 17 Times
 14.235.50.8 (static.vnpt.vn): 2 Times
 20.2.154.67: 18 Times
 27.254.235.2: 13 Times
 34.64.41.134 (134.41.64.34.bc.googleusercontent.com): 23 Times
 34.101.240.144 (144.240.101.34.bc.googleusercontent.com): 5 Times
 36.110.172.218: 22 Times
 40.83.182.122: 21 Times
 42.51.33.209: 25 Times
 43.134.231.143: 22 Times
 43.154.195.142: 22 Times
 43.252.229.158: 4 Times
 45.135.232.92: 16 Times
 51.222.159.224 (vps-43a0032f.vps.ovh.ca): 20 Times
 52.233.1.108: 27 Times
 60.54.52.227: 1 Time
 62.210.131.177 (62-210-131-177.rev.poneytelecom.eu): 3 Times
 66.179.208.159 (ip66-179-208-159.pbiaas.com): 4 Times
 72.53.210.6: 1 Time
 80.94.95.15: 38 Times
 80.94.95.112: 32 Times
 81.133.106.57 (host81-133-106-57.in-addr.btopenworld.com): 28 Times
 85.152.57.60 (cm-staticip-85-152-57-60.telecable.es): 1 Time
 92.56.97.4 (4.pool92-56-97.dynamic.orange.es): 21 Times
 92.118.39.92: 26 Times
 94.159.98.241 (138696.h2.nexus): 23 Times
 101.36.231.231: 22 Times
 101.47.5.97: 18 Times
 103.63.25.246 (ip103-63-25-246.cloudhost.web.id): 2 Times
 103.99.11.234: 26 Times
 103.189.234.85 (syn-103-189-234-085.res.spectrum.com): 22 Times
 104.236.247.57: 4 Times
 106.12.197.155: 2 Times
 107.173.10.98 (107-173-10-98-host.colocrossing.com): 10 Times
 107.189.29.175 (node4.anycasthub.com): 16 Times
 111.67.199.209: 3 Times
 113.31.108.164: 25 Times
 116.110.82.13: 2 Times
 116.110.93.112: 4 Times
 117.50.226.30: 3 Times
 117.66.240.147: 18 Times
 117.216.211.19 (static.ill.117.216.211.19.bsnl.co.in): 29 Times
 119.255.245.44: 2 Times
 120.48.98.125: 5 Times
 120.48.175.241: 3 Times
 122.156.167.62: 5 Times
 137.184.169.195: 4 Times
 139.59.21.115: 29 Times
 143.198.36.109: 24 Times
 161.35.184.65: 21 Times
 172.105.18.94 (172-105-18-94.ip.linodeusercontent.com): 1 Time
 172.105.102.42 (dev3.academyforinternetresearch.org): 1 Time
 175.139.176.213: 22 Times
 176.65.148.10 (hosted-by.pfcloud.io): 1 Time
 178.27.90.142 (ipb21b5a8e.dynamic.kabel-deutschland.de): 17 Times
 178.177.19.25: 24 Times
 182.215.66.232: 2 Times
 182.224.231.102: 1 Time
 185.93.89.118: 5 Times
 185.213.164.197 (static.197.164.213.185.clients.irandns.com): 20 Times
 186.121.241.93 (static-186-121-241-93.acelerate.net): 19 Times
 188.253.126.200: 1 Time
 193.32.162.143: 33 Times
 193.32.162.157: 5 Times
 198.24.79.245 (syn-198-024-079-245.biz.spectrum.com): 1 Time
 204.44.127.231: 4 Times
 217.182.200.127 (ns3068737.ip-217-182-200.eu): 25 Times
 222.108.100.117: 1 Time

system login attempted:

 daemon : 3 Times
 root : 395 Times
 www-data : 1 Time

received disconnect:

 Bye Bye [preauth] : 1024 Times
 Bye [preauth] : 71 Times
 error: Protocol major versions differ: 2 vs. 1 : 4 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "CONNECT packetsdatabase.com:443 HTTP/1.1" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 2 Times
 error: kex_exchange_identification: read: Connection reset by peer : 25 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times

dictionary attacks: 550 unique usernames.

 * + - ~ 0 1 123 a aaa abbott abc abhi abhinav acer actions activemq
 adam adm Admin admin admin123 adminftp administrador Administrator
 administrator adrianna afa alberto alexandre ali alice alin alireza
 allinone almacen aluno ambari amin amine amir anas andres andrey anil
 anna anon ansadmin ansible aovalle apache apagar apple appuser april
 arcgis ari aria armando asad asd ashish asia astra aubrey auditor
 automation autrede aziz azureuser backuppc bareos bash beehive bitcoin
 bitnami bitrix blog boda boom bot bot1 bounce btc build ca cacti caden
 cardano carlos celeryuser centos cgpexpert chad chat christine cisco
 client clock cloudftp code colby composeruser connect connor copia
 cortega crm csadmin csgoserver csserver ctl dal dan daniel dave david
 db2admin db2fenc1 db2inst1 dc ddd deamon deamon_root debian default
 delegate demo deploy deployer depot dev develop developer1 developers
 devops devtest diogo discord docker dogecoin drcomadmin dspace dummy
 ec2-user edubook elena elsearch eoffice erp ERPNext es esunny eth
 ether ethereum ethereumdocker exchangeadmin factorio fedora flash
 flussonic foundry fran francesco frappe frappe-user freshlogs frontend
 ftp ftp_admin ftp_client ftp_id ftptest ftpUser ftp-user ftp_user
 ftpuser fuho fw g gadmin ganesh gaurav gg ghost ghostcms gino git
 gitlab gitlab-runner gits gmodserver gns3 gpadmin grace greg griffin
 guest gwei hadi halo hasan hdoop hduser henry home homeassistant hrm
 hu ian import infoserve installer intel io it itadmin j jack jackett
 jackson jane janus javad jellyfin jenkins jerry jhevi jimmy jira
 jmarquez johnny jrodrig jzgrl kali kamil kevin khan kian king kkadmin
 kobe kristina lab ladmin lander lauryn lch leo light liming linus linux
 linuxuser lisi ljsoft local localadmin log loguser logviewer lola luca
 luo mallory manager mani manish marc marcos mariadb martin max mcadmin
 mcserver metasfresh mika mikey minecraft mohit monika morgan mosquitto
 myftp mysql mysqladmin mytest mythtv natalia naveen nb neko network3
 new newuser1 newusername nextcloud nexus nick nikhil nikolay nina
 nino nmr node nodeuser nominatim (none) noreply notes nrk nurul nushi
 nvidia odin odoo ofbiz off omid one oneadmin onkar openbravo operator
 oracle oscar ospite ossuser pablo panda paul pc peter pierre ping pivpn
 podfolio polkadot pool posiflex postgre postgres postgresql prakash
 presence prod production prometheus prueba psg pt public q qbtuser qn
 qw r rafael rahul rancid raven rc remote report rise rita rocketmq
 rodrigo roman roo root1 root2 rootftp rtc runcloud runner rust ryan
 s1 sa sabina saeed sahil said sales salim samp samson san sara satis
 scan scheduler sdbadmin seafile secure security sepehr server sfserver
 sftp sftptest sftp_user shiny shiv shree sim sincroniza singh sistema
 sistemas siteadmin skyler smart smb sms sol solana sonarr soporte splunk
 spring squid sshtunnel sshuser staging stefan stefano stperez student
 super superv supervisor support susi syncthing sysadmin sysop system
 systems szy t1 tan teamcity teamspeak tech techuser tecnopos telkom
 temp tempuser terraria test test01 test1 test2 teste1 testing testmail
 testserver test_user testuser tg theo tidb tomcat tomcat1 tommy ton tony
 toor trade-bot trade.bot tradebot training trent ts3 ts3server tv ty
 ubnt ubuntu umair user user001 user002 user03 user1 user12 user14 user2
 user3 user4 user7 user8 user_jenkins username username1 usman usuario
 usuario2 valera valeria valheim validate validator vastbase ventas01
 ventas05 vhserver vinay VM vpn vpnuser vtiger vyatta vyos wang wangcx
 web web3 webadmin wfp wg whmcs wialon wikijs william windows wireguard
 wordpress work workflow wp-user wsq wuhan www xbmc xg xh xiao xq youssef
 ypwang yupei yuriy z zimbra zjh znc