freshlogs
is the concept
see Disclaimer and Terms of Service.
Use index.txt for complete long lines.
Use prev-index.d for previous posts.
Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box.. added a list of unique usernames from dictionary attacks.
Thursday November 20, 2025
denied by configuration:
1.221.66.66: 2 Times
2.57.121.112 (dns112.personaliseplus.com): 12 Times
4.211.84.189: 3 Times
14.96.134.42 (mail.tataidc.com): 3 Times
14.103.73.80: 9 Times
14.103.118.177: 2 Times
14.103.123.50: 3 Times
14.103.139.66: 4 Times
14.103.168.32: 3 Times
27.79.5.24 (localhost): 1 Time
27.100.36.42 (vps.MikeCampbellInsuranceAgency.com): 3 Times
27.128.160.208: 4 Times
37.202.239.136 (37-202-239-136.shatel.ir): 3 Times
37.252.188.15 (lusut.com): 4 Times
38.22.160.113: 2 Times
43.165.191.108: 3 Times
44.220.188.134 (ec2-44-220-188-134.compute-1.amazonaws.com): 1 Time
45.78.198.206: 10 Times
45.78.200.112: 5 Times
45.78.205.150: 11 Times
45.78.216.156: 10 Times
45.78.216.178: 15 Times
45.78.218.149: 9 Times
45.135.232.92: 12 Times
45.140.17.124: 31 Times
49.64.85.220: 3 Times
51.79.68.87 (mail.sbiwee.com): 2 Times
51.159.105.145 (server105145.webhi.org): 1 Time
54.39.43.8 (ip8.ip-54-39-43.net): 2 Times
62.60.131.157: 19 Times
64.227.76.143: 2 Times
65.49.1.161 (scan-71-09.shadowserver.org): 1 Time
68.183.78.231: 3 Times
76.11.71.59 (host-76-11-71-59.public.eastlink.ca): 1 Time
80.94.92.182: 4 Times
82.65.121.222 (82-65-121-222.subs.proxad.net): 10 Times
88.213.102.200: 3 Times
90.154.46.138: 7 Times
92.118.39.95: 23 Times
95.140.153.27: 1 Time
101.36.122.23: 3 Times
101.47.162.116: 11 Times
101.47.163.103: 12 Times
101.47.163.143: 10 Times
101.90.33.211: 3 Times
102.211.152.138: 3 Times
103.49.238.212 (ip103-49-238-212.cloudhost.web.id): 2 Times
103.86.198.253 (mrtg.maishabd.net): 2 Times
103.144.28.133: 2 Times
103.176.78.193 (ip103-176-78-193.cloudhost.web.id): 2 Times
103.217.144.161 (ip103-217-144-161.cloudhost.web.id): 1 Time
103.243.25.82: 4 Times
107.174.67.215 (107-174-67-215-host.colocrossing.com): 3 Times
109.205.114.34: 3 Times
111.61.84.132: 4 Times
112.164.20.69: 2 Times
116.110.149.75: 4 Times
117.81.233.236: 5 Times
119.197.87.141: 2 Times
124.220.16.150: 1 Time
128.199.219.184 (vina24h.com): 1 Time
138.124.20.112: 4 Times
141.227.129.219 (vps-4b3ce878.vps.ovh.net): 2 Times
144.48.37.155: 3 Times
147.182.173.108: 2 Times
150.5.169.138: 3 Times
150.5.169.176: 11 Times
151.57.97.202: 3 Times
152.32.135.217: 1 Time
152.32.189.21: 3 Times
156.239.242.66: 4 Times
158.178.141.16: 3 Times
159.89.161.111: 2 Times
161.132.68.222: 3 Times
167.99.56.197: 1 Time
171.231.194.62 (dynamic-ip-adsl.viettel.vn): 3 Times
171.243.149.124 (dynamic-ip-adsl.viettel.vn): 5 Times
173.249.41.171 (ip-171-41-249-173.static.contabo.net): 2 Times
176.65.148.161 (176.65.148.161.ptr.pfcloud.network): 14 Times
178.20.210.134 (hifalutin.banhkemcantho.com): 1 Time
178.128.147.10: 2 Times
182.43.235.218: 4 Times
185.213.165.211 (static.211.165.213.185.clients.irandns.com): 2 Times
186.13.24.118 (host118.186-13-24.telmex.net.ar): 3 Times
190.143.101.69: 3 Times
192.3.233.191 (192-3-233-191-host.colocrossing.com): 3 Times
192.210.160.141 (192-210-160-141-host.colocrossing.com): 2 Times
193.32.162.146: 14 Times
194.233.74.228 (vmi2789836.contaboserver.net): 1 Time
197.5.145.8: 4 Times
197.44.15.210: 2 Times
197.248.104.19 (197-248-104-19.safaricombusiness.co.ke): 3 Times
198.12.123.22 (198-12-123-22-host.colocrossing.com): 2 Times
200.91.236.125 (mail.taxislibres.com.co): 2 Times
200.196.50.91 (mvx-200-196-50-91.mundivox.com): 3 Times
202.58.207.249 (ip-249-207-58-202.globalxtreme.net): 1 Time
202.60.231.203 (ip-202-60-231-203.cyberec.com): 3 Times
203.150.107.244 (244.107.150.203.sta.inet.co.th): 3 Times
209.141.43.77 (admin.aimangas.com): 2 Times
216.40.85.82: 4 Times
221.151.181.65: 3 Times
222.104.120.107: 2 Times
system login attempted:
root : 498 Times
received disconnect:
[preauth] : 91 Times
Bye Bye [preauth] : 514 Times
Bye [preauth] : 34 Times
Client disconnecting normally [preauth] : 1 Time
Disconnected from invalid user 2.57.121.112 port 62145 [preauth] : 1 Time
Disconnected from invalid user 2.57.121.112 port 62582 [preauth] : 1 Time
Disconnected from invalid user 2.57.121.112 port 62590 [preauth] : 1 Time
error: Protocol major versions differ: 2 vs. 1 : 1 Time
error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times
error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" : 2 Times
error: kex_exchange_identification: read: Connection reset by peer : 15 Times
error: kex_protocol_error: type 20 seq 2 [preauth] : 4 Times
error: kex_protocol_error: type 20 seq 4 [preauth] : 4 Times
error: kex_protocol_error: type 20 seq 6 [preauth] : 4 Times
error: kex_protocol_error: type 30 seq 3 [preauth] : 4 Times
error: kex_protocol_error: type 30 seq 5 [preauth] : 4 Times
error: kex_protocol_error: type 30 seq 7 [preauth] : 4 Times
dictionary attacks: 258 unique usernames.
a accounting adam ADMIN admin admin1 Administrator administrator
adminuser akash alan ali alpha alycia amalia amin amule anjali anonymous
ansible anudeep apt arash backupuser bigbluebutton bitrix boomi bot
caja chat chrome client cliente clifton clouduser connie cortez cpc
cpg CSG ct ctf daisha dara daryl david debian dejah dell demo deploy
deployer desliga destin dev develop developer diana dima divya dmdba
docker dockeruser donavan draven drew dspace emilia emmalee emmett
ems erfan erpnext es estefania eth ethereum exo fastuser filter free
freshlogs fritzbox frontend ftpsecure ftptest1 ftp_user ftpuser gopal
grafana group1 guest guest1 hamed hb headscale helen hello hoster
hussain hyperchain info informix infra installer intern internal jacky
jakayla jamari jameson jb jeff jito jj johnson jonathan kali karin
kaveh kevin kkj lab lando lemon leo li like lilliana local localhost
loki luis magdalena manage manager marina mcadmin media mikrotik
milan min mina mine minh minima monika msfadmin mycat mysql nagios
netman newuser newusername nick nifi nimda NL5xUDpV2xRa node (none)
nps nyasia odoo odroid ods omar oper oracle orangepi paola paul peter
pi piyush plex podcast portal postgres pymes pyxis radio reno respaldo
rex richard rmartinez root11 rtc runcloud runner ryan sal samba sammy
santana sbot sd sean sens service sftptest shaniya sheller shree singh
sistemas smile sofia sol solana solv sp squid steam sumit support sysadm
sysadmin tacuser tech test test1 test2 testftp test_user testuser tomcat
ton trade ts3server ttbot u1 ubnt ubuntu user user01 user1 username
usuario va vagrant validator vivek vpn vpnuser web webmaster wg won
wushi www xtest z zahid zhang zhangsan zhenshan zz