freshlogs is the concept
see https://www.freshlogs.ca/fl-ToS-Disclaimer.html
Use https://freshlogs.ca/index.txt for complete long lines.
Use https://freshlogs.ca/prev-index.d/ for previous posts.

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.  Added a
quick list of unique usernames from dictionary attacks.

Thursday June 12, 2025

denied by configuration:

 14.103.93.175: 1 Time
 14.103.114.55: 8 Times
 14.103.114.234: 2 Times
 14.103.116.192: 6 Times
 14.103.117.75: 1 Time
 14.103.118.208: 30 Times
 14.103.120.138: 30 Times
 14.103.124.188: 3 Times
 14.103.132.206: 4 Times
 14.103.170.169: 23 Times
 14.225.3.79: 4 Times
 20.217.18.228: 27 Times
 23.91.96.123: 4 Times
 34.74.242.228 (228.242.74.34.bc.googleusercontent.com): 8 Times
 36.111.172.105: 1 Time
 37.220.86.110 (47425.ip-ptr.tech): 23 Times
 45.135.232.92: 16 Times
 46.101.210.71: 4 Times
 51.75.194.10 (vps-f8f463b5.vps.ovh.net): 16 Times
 64.62.197.38 (scan-37g.shadowserver.org): 1 Time
 74.94.234.151 (74-94-234-151-Michigan.hfc.comcastbusiness.net): 8 Times
 77.223.101.47: 25 Times
 80.94.95.15: 24 Times
 80.94.95.112: 35 Times
 80.94.95.115: 17 Times
 80.94.95.116: 24 Times
 84.241.43.72 (84-241-43-72.shatel.ir): 1 Time
 91.77.163.86: 24 Times
 91.205.219.185: 26 Times
 95.58.255.251 (95.58.255.251.static.telecom.kz): 21 Times
 101.36.126.138: 4 Times
 101.126.30.240: 15 Times
 101.126.88.203: 4 Times
 101.126.90.52: 1 Time
 101.201.38.226: 1 Time
 103.27.237.36: 27 Times
 103.119.92.117: 17 Times
 103.165.218.190 (190.218.165.103.net.iforte.net.id): 4 Times
 103.176.79.115 (o511.97.sailthru.groovebeauty.com): 22 Times
 113.31.103.179 (zkhdata.cn): 26 Times
 116.98.175.193 (dynamic-ip-adsl.viettel.vn): 3 Times
 116.110.70.80: 4 Times
 116.110.121.222: 5 Times
 116.255.233.39: 27 Times
 118.194.253.212: 1 Time
 119.187.164.226: 1 Time
 120.48.98.125: 4 Times
 124.223.219.9: 5 Times
 125.18.49.130: 4 Times
 134.199.151.141: 1 Time
 136.232.203.134: 6 Times
 139.9.68.73 (ecs-139-9-68-73.compute.hwclouds-dns.com): 1 Time
 139.178.98.25 (139.178.98.25.power-speed.at): 2 Times
 144.217.13.134 (vps-2cf81da8.vps.ovh.ca): 29 Times
 152.32.250.188: 6 Times
 157.66.55.149: 3 Times
 165.227.92.74: 4 Times
 167.99.89.66: 2 Times
 170.64.199.14: 1 Time
 172.105.102.42 (dev3.academyforinternetresearch.org): 1 Time
 175.178.19.249: 1 Time
 178.177.19.25: 15 Times
 179.100.43.38 (179-100-43-38.user.vivozap.com.br): 13 Times
 180.184.183.66: 8 Times
 181.47.161.200 (cpe-181-47-161-200.telecentro-reversos.com.ar): 25 Times
 182.176.168.253: 1 Time
 182.176.169.111: 2 Times
 183.159.179.61: 5 Times
 185.93.89.118: 5 Times
 185.156.73.233: 14 Times
 185.156.73.234: 15 Times
 185.213.165.126 (static.126.165.213.185.clients.irandns.com): 24 Times
 188.111.53.214: 2 Times
 193.32.162.157: 5 Times
 194.0.234.19: 4 Times
 204.44.127.231: 4 Times
 209.38.80.46: 1 Time
 209.38.88.35: 1 Time

system login attempted:

 sshd : 2 Times
 backup : 2 Times
 nobody : 2 Times
 root : 311 Times
 uucp : 1 Time

received disconnect:

 Bye Bye [preauth] : 703 Times
 Bye [preauth] : 79 Times
 drop connection #10 from [80.94.95.15]:54760 past MaxStartups : 1 Time
 error: Protocol major versions differ: 2 vs. 1 : 2 Times
 error: beginning MaxStartups throttling : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 3 Times
 error: kex_exchange_identification: read: Connection reset by peer : 29 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times
 exited MaxStartups throttling after 00:00:27, 1 connections dropped : 1 Time

dictionary attacks: 442 unique usernames.

 1 1111 123 1234 a abc adm admin admin1 admin123 admin1234 administrador
 Administrator administrator adminuser adrian adv ahmed alberto alex ali
 alice alin allyson aluno amssys anaconda andreas andrey anonymous ansible
 aovalle apacher app appuser arcgis aria array artem arun asad ashton
 asterisk auser av avinash awx Azure azure azureuser B backups barman bayu
 best bitcoin bitrix24 bitwarden bkp bob bot brandon bravo brenda btest
 builduser c2 ca caja casaos castle cat celery chris chrome client cloud
 clouduser coder config consultor copia crafty crap crm cvmfs cx cyril
 damien daniel dashuai dave david dd deamon debian debianuser default
 demo deploy deployment dev1 developer1 devuser dls dmdba dmsadmin dokku
 dspace ec2-user eduard edwin een ekp elasticuser elias erp erpnext es esb
 es_user esuser etherpad examen factorio faisal farmacia fatima filezilla
 firewall fivem flussonic foundry fran freshlogs frontend ftp ftpsecure
 ftpupload ftp_user ftpuser gabriel ganesh gbasedbt genesis geo gerrit
 gg ghost gianna gino git git-admin gitadmin gitea gitlab gracie grid
 guadalupe guest gustavo hacluster hadoop hadoopuser hammad hamza hassan
 hduser home huawei ian idempiere import info installer io iptv ismail
 it itadmin ivan j jake jasmin jason1 jenkins jessica jmarquez joao john
 jose jrodrig juliana julio kevin kian king kingbase kk koha lab laura
 leidyroa leo leonardo lighthouse lin liu liwei liyang localadmin log
 lol long louis lsk luciano luis lx maman manager manoj mapadmin marc
 maria mario marvin mary mastodon matrix mc mcadmin mcserver mika mikey
 milad miles minecraft mini mk mohsen mongod monika monitoring morgan
 mukund mysql mythtv myuser nas network3 newadmin newftpuser newuser
 newusername nexus nima node (none) notes nutanix ob ocean ociisstd
 odoo onkar onlime_r open openhabian openproject oper operator Oracle
 oracle oxidized p palserver palworld papa patrick paul payara philip pi
 podfolio posiflex postgres ppp prod production prueba psg public pzkwy
 rahul rancher readarr readonly renyun reza reza2 riad rke roman roo
 rooter rstudio rtc runcloud ruslan rustserver saas sadie sales salim
 samba samp sandbox sanjay satis satya saude sc scan scheduler sdbadmin
 seedbox seekcy sepehr server service sftpuser shiny sina sinusbot
 sipv smart smb_user sol speedtest squid sshuser steam steamcmd student
 Sujan sunil supermaint superman superv supervisor support susi swadmin
 synology sys_admin sysadmin system t2 taiga taiko tara tech techuser
 telecomadmin telkom template test test01 test1 test123 test7 tester
 testftp testing testmail theo theta thiago tidb tmax tomcat1 ts ts1 ts2
 ts3 ty ubnt ubuntu ubuntu2 under uno user user_1 user1 user10 user11
 user123 user13 user14 user15 user2 user3 user33 user9 usera useradmin
 user-backup userftp username usr1cv8 usuario vbox vijay vishal vitor
 vmail vnc vpn vpn1 wcs web webadmin weblogic webserver wiki wordpress
 workflow wuhan xiaoming xxx ymoreno youssef yuri yuxiang yy zhang
 zhangsan zhihong zmarin znc zomboid