freshlogs is the concept
see Disclaimer and Terms of Service. Use index.txt for complete long lines. Use prev-index.d for previous posts.
Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box.. added a list of unique usernames from dictionary attacks.
Sunday June 22, 2025

denied by configuration:

 14.29.198.130: 5 Times
 14.103.115.25: 28 Times
 14.103.117.75: 21 Times
 14.103.117.98: 2 Times
 14.103.118.25: 29 Times
 14.103.127.242: 28 Times
 27.111.32.174: 29 Times
 27.254.235.13: 14 Times
 37.195.171.219 (l37-195-171-219.novotelecom.ru): 1 Time
 38.54.8.227: 21 Times
 45.135.232.92: 17 Times
 49.232.215.114: 2 Times
 51.158.120.121 (121-120-158-51.instances.scw.cloud): 26 Times
 51.178.137.178 (vps-fe6c4481.vps.ovh.net): 29 Times
 60.221.239.232 (232.239.221.60.adsl-pool.sx.cn): 18 Times
 61.188.205.76 (76.205.188.61.broad.nj.sc.dynamic.163data.com.cn): 6 Times
 65.49.1.20 (scan-52k.shadowserver.org): 1 Time
 73.148.29.153 (c-73-148-29-153.hsd1.va.comcast.net): 2 Times
 80.94.95.15: 48 Times
 80.94.95.112: 35 Times
 80.94.95.115: 5 Times
 80.94.95.116: 8 Times
 80.191.247.45: 27 Times
 85.175.226.39: 28 Times
 91.77.163.86: 29 Times
 93.123.109.127: 4 Times
 101.36.123.173: 18 Times
 101.126.27.208: 3 Times
 101.201.38.226: 1 Time
 101.226.180.6: 6 Times
 103.151.239.51: 9 Times
 103.155.86.212: 23 Times
 103.165.156.230 (103-165-156-230.megadata.net.id): 9 Times
 106.38.205.224: 5 Times
 107.174.201.181 (107-174-201-181-host.colocrossing.com): 30 Times
 110.53.126.241: 1 Time
 115.91.91.182: 21 Times
 115.190.21.238: 11 Times
 116.110.27.203: 2 Times
 120.48.98.125: 5 Times
 121.13.236.122: 1 Time
 121.179.106.204: 3 Times
 121.229.7.121: 10 Times
 123.108.70.145: 22 Times
 134.199.225.42: 19 Times
 136.232.203.134: 28 Times
 139.19.117.129 (inet-research-scan-5.mpi-inf.mpg.de): 1 Time
 146.59.80.142 (vps-8abc05fb.vps.ovh.net): 20 Times
 146.59.95.254 (vps-c4881b1d.vps.ovh.net): 28 Times
 147.0.206.46 (syn-147-000-206-046.biz.spectrum.com): 1 Time
 158.174.211.17 (h-158-174-211-17.NA.cust.bahnhof.se): 25 Times
 171.251.25.212 (dynamic-ip-adsl.viettel.vn): 4 Times
 172.105.102.42 (dev3.academyforinternetresearch.org): 1 Time
 172.174.5.146: 15 Times
 178.19.235.29 (nat-178-19-235-29.net.encoline.de): 2 Times
 181.116.220.12: 29 Times
 182.93.50.90 (n18293z50l90.static.ctmip.net): 21 Times
 182.229.10.141: 26 Times
 185.93.89.118: 5 Times
 185.156.73.233: 10 Times
 185.156.73.234: 8 Times
 187.212.35.121 (dsl-187-212-35-121-dyn.prod-infinitum.com.mx): 11 Times
 190.104.25.210 (LPZ-190-104-25-00210.tigo.bo): 29 Times
 193.24.211.22: 1 Time
 193.32.162.157: 5 Times
 194.0.234.19: 1 Time
 194.0.234.93: 7 Times
 203.150.162.250 (250.162.150.203.sta.inet.co.th): 20 Times
 206.189.133.78: 1 Time
 207.180.247.13 (vmi572253.contaboserver.net): 1 Time
 213.155.195.169 (213-155-195-x.dynamic.b-domolink.net): 28 Times
 218.78.60.105: 29 Times

system login attempted:

 sshd : 2 Times
 nobody : 1 Time
 root : 348 Times
 uucp : 1 Time
 www-data : 1 Time

received disconnect:

 Bye Bye [preauth] : 1002 Times
 Bye [preauth] : 68 Times
 Client disconnecting normally [preauth] : 1 Time
 error: Protocol major versions differ: 2 vs. 1 : 2 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 3 Times
 error: kex_exchange_identification: read: Connection reset by peer : 56 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times

dictionary attacks: 492 unique usernames.

 1234 12345 a access acer acs adm Admin admin admin1 admin1234
 administrator admins ahmad aj alex alexandre alexis ali alice alireza
 alumno amin amir anahi andreas andrew anil anna anon anonymous ansible
 anton apiadmin arkserver arun asag autrede azureuser baba backend
 backuppc bayu bbb bender best bitnami bitrix bob bot branden braxton
 brenda brody btest builder bwadmin caja cam castle cc centos cgpexpert
 chat clock cloudadmin config consulta craig crypto cuser dan dangulo
 daniel daniella danya david dbadmin dbkmp deamon deamon_root debianuser
 deep deepak demo demo1 dennis deploy deployer desliga dev developer
 devuser diego discord dmdba docker domain dspace eddie edubook egarcia
 elastic elasticsearch elemental elena ellie erp es esteban exx factura
 fluqueta foundry frappe frappe-user freshlogs ftest ftp1 ftp2 ftp_admin
 ftpadmin ftp_id ftptest ftpupload ftpUser ftpuser ftpuser1 ftpusers
 ftpusertest fuser gaurav gbasedbt george giorgio gisselle git gitea
 gitlab gitolite gloria gmodserver gns3 goga going gokul gpadmin grid
 guest hadoop hamed hdoop henry home hossein hp hpcadmin hruser hu i
 idf iman in info infra insight installer int ionadmin ionguest irvps
 isiah ismael ismail itadmin j jacob jacquelyn james jason jeff jeffery
 jenkins jenny jira jj joe john jonas jonathan josh joy julissa kafka
 kaitlynn kali kamil kevin keycloak khan kk kodi lab ladyaspb leo lfs
 lighthouse lihui liming linda linuxadmin lizbeth loginuser lol luciano
 luis luo mahdi mailtest mailuser manuel marco maria mariadb mark
 marshall marvin mas mc mcadmin mcserver me michelle miguel mike milad
 minecraft minecraftserver mininet misha mm mmd mohamad monika morgan
 mpi mqm mtcl mtvps1 mysql myuser nagios newuser newusername nfsuser
 nikhil nikita NL5xUDpV2xRa nmr noc node nodeuser nominatim (none) nsuser
 nvidia nxuser odin odoo odoouser oe office omar onkar openhabian openkm
 operator opsadmin oracle orange oscar ospite ossuser palworld panda
 pavel pedro pepe pg pi ping plex pool pop postfix postfixtester postgres
 precio01 production proxyuser proxyuser1 pruebasfe psg public pwserver
 pz pzuser q r radio radius rahul rails ram raul reelftptv renee renyun
 reporting retag rigo rocketmq rocky rodney roman root2 rootftp roott RPM
 rstudio rsync runcloud ruslan s1 saeed sales salim sammy samp sandeep
 sanket santana scan sendmail sepehr server server1 serveradmin seyoung
 sftpadmin sftptest sftpuser share shubham sinusbot slave smb smbuser
 sms sockduser socksuser soheil sonar sopuser squid sshadmin stack steam
 stperez student superman superv support supports svn sysadmin systems
 szy t1 taibabi taiga teamspeak tech tejas telecomadmin telkom temp
 tempuser terraria terry test test001 test01 test1 test123 test1234
 test2 test3 test4 test5 test6 testadmin testbox teste teste2 tester
 testing testserver testuser testwww thomas tidb tim tmpuser tony trade
 ts ts2 tunnel tyson u1 ubadmin ubnt UBUNTU ubuntu uftp uno85 User user
 user01 user03 user1 user11 user12 user13 user2 user4 user6 user7 user8
 user_jenkins username username1 usertest usher usman vbox victor vincent
 vintagestory virginia vncuser vpn vpnuser vpsuser vscode vyos wang wcs
 web-admin webadmin weblogic webtest web-user webuser whmcs wialon wiki
 will windows winter wj work wpuser ws xg xh xiangyu xiaoming xx xxx
 yang yaraque yoyo zabbix zcm zero zhangsan zhangwei zhihong zjw zyx
 

By using this site you agree to accept the Terms Of Service and Disclaimer. CONTACT: info at freshlogs.ca