freshlogs is the concept
see Disclaimer and Terms of Service. Use index.txt for complete long lines. Use prev-index.d for previous posts.
Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box.. added a list of unique usernames from dictionary attacks.
Wednesday January 7, 2026

denied by configuration:

 2.57.121.25 (hosting25.tronicsat.com): 5 Times
 2.57.121.112 (dns112.personaliseplus.com): 19 Times
 8.138.155.88: 1 Time
 8.243.50.114: 2 Times
 14.29.240.154: 4 Times
 14.55.144.22: 4 Times
 14.103.67.10: 4 Times
 14.103.105.56: 3 Times
 14.103.123.166: 2 Times
 14.103.158.69: 3 Times
 14.103.243.51: 3 Times
 15.235.162.8 (vps-08db77bd.vps.ovh.ca): 2 Times
 24.199.117.9: 3 Times
 27.110.166.67 (ns2.revlv.net): 1 Time
 27.112.79.123 (ip27-112-79-123.cloudhost.web.id): 5 Times
 34.58.124.191 (191.124.58.34.bc.googleusercontent.com): 1 Time
 34.78.29.97 (97.29.78.34.bc.googleusercontent.com): 4 Times
 34.92.247.119 (119.247.92.34.bc.googleusercontent.com): 2 Times
 35.216.63.127 (127.63.216.35.bc.googleusercontent.com): 3 Times
 35.240.174.82 (82.174.240.35.bc.googleusercontent.com): 10 Times
 36.93.249.106: 3 Times
 37.59.110.4 (vps-0b2df990.vps.ovh.net): 2 Times
 38.19.145.144: 4 Times
 43.173.254.125: 2 Times
 45.67.32.76: 2 Times
 45.78.194.187: 5 Times
 45.78.197.91: 3 Times
 45.78.207.78: 3 Times
 45.78.217.237: 2 Times
 45.78.218.101: 6 Times
 45.78.219.116: 4 Times
 45.78.219.200: 4 Times
 45.78.221.88: 1 Time
 45.78.221.93: 16 Times
 45.78.222.9: 2 Times
 45.78.222.19: 5 Times
 45.78.222.108: 3 Times
 45.78.227.29: 4 Times
 45.78.227.155: 5 Times
 45.135.194.87 (45.135.194.87.ptr.pfcloud.network): 4 Times
 45.135.232.92: 14 Times
 45.148.10.121: 15 Times
 47.239.254.43: 1 Time
 51.83.46.40 (vps-895395e9.vps.ovh.net): 2 Times
 60.188.57.249: 5 Times
 61.28.144.154 (154.144.28.61.unassigned.static.eastern-tele.com): 4 Times
 61.36.200.131: 2 Times
 61.72.55.130: 5 Times
 61.245.11.87: 2 Times
 62.12.113.65 (static-62-12-113-65.ips.angani.co): 1 Time
 64.23.180.137: 4 Times
 64.225.99.151 (mail.ggi-sa.co): 3 Times
 64.227.131.199: 5 Times
 64.227.182.38: 5 Times
 65.49.1.67 (scan-56b.shadowserver.org): 1 Time
 67.205.163.146: 12 Times
 69.5.189.189 (VPS-vbnKxZEc): 2 Times
 80.94.92.166: 34 Times
 80.94.92.177: 348 Times
 80.94.92.186: 11 Times
 82.24.64.209: 3 Times
 82.196.25.62 (62.25.196.82.in-addr.arpa): 2 Times
 85.215.167.135 (ip85.215.167.135.pbiaas.com): 1 Time
 91.207.115.249: 2 Times
 92.118.39.92: 5 Times
 94.182.15.94 (94-182-15-94.shatel.ir): 4 Times
 101.47.50.42: 4 Times
 101.47.140.212: 4 Times
 101.47.140.253: 4 Times
 101.47.142.43: 5 Times
 101.47.142.98: 1 Time
 101.47.160.125: 3 Times
 101.47.161.11: 3 Times
 101.47.161.79: 4 Times
 101.47.163.20: 2 Times
 101.89.182.189: 3 Times
 101.126.55.63: 3 Times
 102.88.137.80: 1 Time
 102.218.89.110: 3 Times
 103.23.199.128 (ip103-23-199-128.cloudhost.web.id): 4 Times
 103.30.41.231: 4 Times
 103.98.176.164: 2 Times
 103.148.195.237: 4 Times
 103.164.20.29: 18 Times
 103.164.81.65: 5 Times
 103.176.79.137: 3 Times
 104.244.74.84: 4 Times
 111.47.243.219: 4 Times
 112.220.250.19: 4 Times
 114.111.54.188: 2 Times
 116.110.149.206: 3 Times
 116.110.154.75: 4 Times
 116.193.191.159 (ip116-193-191-159.cloudhost.web.id): 5 Times
 119.53.253.2 (2.253.53.119.adsl-pool.jlccptt.net.cn): 4 Times
 120.62.8.17 (triband-mum-120.62.8.17.mtnl.net.in): 4 Times
 121.224.115.232: 3 Times
 125.75.108.168: 2 Times
 125.94.235.86: 4 Times
 128.1.38.169: 4 Times
 129.146.125.96: 1 Time
 139.59.159.209: 5 Times
 141.95.36.224 (ip224.ip-141-95-36.eu): 5 Times
 144.48.8.10: 2 Times
 150.5.157.20: 3 Times
 152.200.139.118: 1 Time
 154.72.233.36: 4 Times
 154.124.97.102: 3 Times
 160.251.251.171 (v160-251-251-171.jmo3.static.cnode.jp): 5 Times
 162.241.87.197 (162-241-87-197.webhostbox.net): 3 Times
 165.245.132.73: 1 Time
 167.99.122.86: 5 Times
 172.208.24.217: 3 Times
 174.138.23.122: 5 Times
 183.36.126.68: 5 Times
 185.228.135.197: 1 Time
 186.103.169.12 (186-103-169-12.static.tie.cl): 4 Times
 187.107.88.97 (bb6b5861.virtua.com.br): 4 Times
 187.170.3.81 (dsl-187-170-3-81-dyn.prod-infinitum.com.mx): 16 Times
 187.188.0.71 (fixed-187-188-0-71.totalplay.net): 2 Times
 187.230.76.112 (dsl-187-230-76-112-dyn.prod-infinitum.com.mx): 5 Times
 190.181.27.27 (static-190-181-27-27.acelerate.net): 1 Time
 191.13.244.157 (191-13-244-157.user.vivozap.com.br): 3 Times
 193.233.48.169 (127262.ip-ptr.tech): 2 Times
 194.226.49.149: 4 Times
 197.225.146.23: 2 Times
 198.12.88.131 (198-12-88-131-host.colocrossing.com): 3 Times
 202.111.183.30: 1 Time
 203.90.110.186: 3 Times
 207.154.209.111: 2 Times
 210.79.142.221: 2 Times
 210.111.222.222: 1 Time
 212.11.64.164 (VPS-CBvLZayY): 3 Times
 213.6.203.226: 2 Times
 213.209.159.142: 1 Time
 213.209.159.158: 5 Times
 213.209.159.159: 19 Times
 216.10.242.161 (216-10-242-161.webhostbox.net): 3 Times
 219.92.8.45 (dm-8-45.tm.net.my): 1 Time
 221.151.181.65: 1 Time

system login attempted:

 games : 1 Time
 nobody : 5 Times
 root : 796 Times
 sync : 1 Time

received disconnect:

  [preauth] : 97 Times
 Bye Bye [preauth] : 585 Times
 Bye [preauth] : 43 Times
 drop connection #10 from [14.103.158.69]:35740 past MaxStartups : 1 Time
 drop connection #10 from [14.29.240.154]:51576 past MaxStartups : 1 Time
 drop connection #10 from [157.143.125.172]:61424 past MaxStartups : 1 Time
 drop connection #10 from [183.36.126.68]:41594 past MaxStartups : 1 Time
 drop connection #11 from [121.224.115.232]:37299 past MaxStartups : 1 Time
 drop connection #12 from [101.126.55.63]:44544 past MaxStartups : 1 Time
 drop connection #12 from [121.224.115.232]:41519 past MaxStartups : 1 Time
 error: beginning MaxStartups throttling : 3 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 3 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" : 2 Times
 error: kex_exchange_identification: read: Connection reset by peer : 21 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 5 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 5 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 5 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 5 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 5 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 5 Times
 exited MaxStartups throttling after 00:00:08, 1 connections dropped : 1 Time
 exited MaxStartups throttling after 00:00:39, 2 connections dropped : 1 Time
 exited MaxStartups throttling after 00:01:24, 4 connections dropped : 1 Time

dictionary attacks: 158 unique usernames.

 a adm Admin admin admin1 AdminGPON adrian adriel alberto alejandro
 ali amax amina avahi azureuser backupuser bamboo binance bootstrap bot
 bottest breanne brun builduser camera claude cloud cmu dbus dbuser dell
 demouser denzel deploy desarrollo drone dspace dwight elasticsearch
 elk enclave enclave-data erp erpuser eth ethereum firedancer forge
 frappe freshlogs frmi80 ftpuser fwadmin fwupgrade g garett gituser
 gpadmin grid guest hadoop houston informix ingres it jailyn jason
 jayde jenkins Jeremy jill jito katlynn kaylan keanu kenna kent kenyon
 laisha lamont loginuser logview mailroot mandy mapr mario martin master
 minima mobiquity mom mother mysql netadm nic node (none) nsrecover okx
 oracle orangepi ossadm pedro pi postgres ps pzuser root1 root2 rootftp
 s3bucket scpuser sdadmin secuser sftproot sftpuser shred shreded slot
 sol solana solv status steam steve student superman support svn svn-cmu
 sybase sysadmin telegram test test1 test2 testadmin testing titu tommy
 trader trading ubnt ubuntu upload uploader user user1 vagrant validator
 vnctest vpnftp vpnuser vpsuser vyatta webftp yessenia zimbra
 

By using this site you agree to accept the Terms Of Service and Disclaimer. CONTACT: info at freshlogs.ca