freshlogs is the concept
see Disclaimer and Terms of Service. Use index.txt for complete long lines. Use prev-index.d for previous posts.
Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box.. added a list of unique usernames from dictionary attacks.
Sunday October 5, 2025

denied by configuration:

 2.57.121.25 (hosting25.tronicsat.com): 18 Times
 2.57.121.112 (dns112.personaliseplus.com): 51 Times
 8.155.45.245: 1 Time
 14.63.196.175: 17 Times
 14.103.112.122: 9 Times
 14.103.162.75: 13 Times
 14.103.168.32: 9 Times
 14.224.199.187 (static.vnpt.vn): 28 Times
 20.115.224.138: 2 Times
 20.169.164.223: 5 Times
 27.78.74.188 (localhost): 5 Times
 27.79.44.88 (localhost): 5 Times
 36.20.126.21: 7 Times
 36.111.156.204: 5 Times
 39.97.32.232: 1 Time
 41.111.208.29: 1 Time
 42.51.42.196: 5 Times
 42.194.202.218: 6 Times
 43.163.7.82: 18 Times
 43.225.158.115: 5 Times
 45.119.81.249: 5 Times
 45.134.26.79: 29 Times
 45.135.232.92: 18 Times
 45.135.232.177: 30 Times
 45.144.177.18: 1 Time
 45.150.9.166 (il-vit-ved.fvds.ru): 3 Times
 47.92.247.216: 1 Time
 47.94.161.29: 1 Time
 47.113.100.53: 1 Time
 47.120.16.190: 1 Time
 49.234.23.207: 12 Times
 58.220.24.66: 1 Time
 60.188.243.140: 3 Times
 62.60.131.157: 50 Times
 65.49.1.158 (scan-71-06.shadowserver.org): 1 Time
 67.207.83.103 (abismochile.cl): 5 Times
 70.66.80.116 (S0106c44fd56dad06.gv.shawcable.net): 3 Times
 88.142.46.185 (185.46.142.88.rev.sfr.net): 5 Times
 96.92.63.243 (96-92-63-243-static.hfc.comcastbusiness.net): 4 Times
 101.35.250.242: 14 Times
 101.36.98.91: 3 Times
 101.126.54.66: 11 Times
 101.126.88.251: 3 Times
 101.126.153.85: 3 Times
 101.132.237.63: 1 Time
 103.106.104.188: 1 Time
 103.113.105.228: 30 Times
 103.171.85.186 (ip103-171-85-186.cloudhost.web.id): 3 Times
 103.179.57.31 (ip103-179-57-31.cloudhost.web.id): 3 Times
 103.250.11.114 (ip103-250-11-114.cloudhost.web.id): 5 Times
 104.168.56.59 (104-168-56-59-host.colocrossing.com): 3 Times
 106.0.4.233: 16 Times
 106.12.109.61: 11 Times
 106.12.213.12: 1 Time
 106.13.7.239: 1 Time
 106.13.183.192: 38 Times
 106.55.197.193: 24 Times
 106.75.154.117 (y6ukzx7c.cn): 3 Times
 107.150.110.167 (furtvey.cn): 5 Times
 107.189.29.175 (node4.anycasthub.com): 5 Times
 110.40.242.124: 3 Times
 112.22.111.56: 3 Times
 114.96.85.57: 5 Times
 115.29.193.189: 1 Time
 115.190.28.207: 2 Times
 115.190.87.71: 30 Times
 115.190.123.233: 1 Time
 116.99.173.68 (dynamic-ip-adsl.viettel.vn): 3 Times
 116.120.58.228: 1 Time
 116.193.190.134 (ip116-193-190-134.cloudhost.web.id): 5 Times
 117.50.120.215: 18 Times
 117.72.113.184: 27 Times
 117.72.122.13: 19 Times
 117.200.84.178: 12 Times
 118.194.230.250: 5 Times
 119.53.253.2 (2.253.53.119.adsl-pool.jlccptt.net.cn): 1 Time
 119.147.84.200: 4 Times
 120.48.98.125: 3 Times
 120.131.12.238: 15 Times
 121.5.33.242: 8 Times
 121.132.81.3: 3 Times
 121.196.235.108: 1 Time
 123.57.23.117: 1 Time
 123.58.16.244: 17 Times
 123.58.213.127: 5 Times
 124.220.53.92: 16 Times
 125.88.225.11: 4 Times
 125.130.113.204: 1 Time
 135.13.11.134: 5 Times
 139.59.244.155: 5 Times
 140.246.80.125: 5 Times
 146.56.40.179: 20 Times
 147.50.103.212: 4 Times
 152.32.213.170: 5 Times
 152.69.231.231: 4 Times
 156.227.234.29: 5 Times
 157.245.115.125 (americasober.prod): 1 Time
 158.220.123.105 (vmi2834839.contaboserver.net): 5 Times
 163.44.99.216 (v163-44-99-216.f3c5.static.cnode.jp): 5 Times
 165.154.205.128: 5 Times
 167.86.127.135 (ip-135-127-86-167.static.contabo.net): 24 Times
 171.231.177.223 (dynamic-adsl.viettel.vn): 4 Times
 172.105.102.42 (dev3.academyforinternetresearch.org): 1 Time
 175.100.24.139: 5 Times
 176.65.148.44 (hosted-by.pfcloud.io): 4 Times
 178.132.89.121: 4 Times
 180.180.1.65 (node-8x.pool-180-180.dynamic.totinternet.net): 1 Time
 181.23.124.240 (181-23-124-240.speedy.com.ar): 7 Times
 182.40.195.233: 11 Times
 183.91.11.36 (static.cmcti.vn): 5 Times
 183.108.86.173: 4 Times
 184.168.29.142 (142.29.168.184.host.secureserver.net): 5 Times
 188.166.169.185: 5 Times
 190.117.52.211: 1 Time
 191.242.105.131: 5 Times
 192.40.58.3 (trulockchokes.com): 4 Times
 193.32.162.146: 8 Times
 196.251.84.225: 1 Time
 196.251.88.103: 1 Time
 206.42.56.228 (206-42-56-228-tmp.static.brisanet.net.br): 5 Times
 210.1.60.243 (ns1.hitradesupply.com): 1 Time
 210.211.97.226: 5 Times
 212.83.165.218 (212-83-165-218.rev.poneytelecom.eu): 3 Times
 212.227.186.13 (ip212-227-186-13.pbiaas.com): 1 Time
 213.209.157.27: 34 Times
 213.209.157.34: 32 Times
 213.209.157.36: 31 Times
 213.209.157.45: 35 Times
 213.209.157.47: 44 Times
 213.209.157.49: 30 Times
 213.209.157.53: 32 Times
 213.209.157.55: 40 Times
 213.209.157.57: 38 Times
 213.209.157.59: 4 Times
 213.209.157.84: 39 Times
 213.209.157.193: 33 Times
 213.209.157.199: 31 Times
 217.154.61.178 (ip217-154-61-178.pbiaas.com): 1 Time
 218.17.239.204: 4 Times
 222.73.48.210: 10 Times

system login attempted:

 backup : 1 Time
 bin : 1 Time
 root : 353 Times

received disconnect:

  [preauth] : 113 Times
 Bye Bye [preauth] : 459 Times
 Bye [preauth] : 122 Times
 Disconnected from invalid user  62.60.131.157 port 61651 [preauth] : 1 Time
 Disconnected from invalid user  62.60.131.157 port 61822 [preauth] : 1 Time
 Disconnected from invalid user  62.60.131.157 port 61966 [preauth] : 1 Time
 Disconnected from invalid user  62.60.131.157 port 62299 [preauth] : 1 Time
 Disconnected from invalid user  62.60.131.157 port 62545 [preauth] : 1 Time
 Disconnected from invalid user  62.60.131.157 port 62600 [preauth] : 1 Time
 Disconnected from invalid user  62.60.131.157 port 62768 [preauth] : 1 Time
 Disconnected from invalid user  62.60.131.157 port 62821 [preauth] : 1 Time
 Disconnected from invalid user  62.60.131.157 port 62867 [preauth] : 1 Time
 Disconnected from invalid user  62.60.131.157 port 62879 [preauth] : 1 Time
 Disconnected from invalid user  62.60.131.157 port 62966 [preauth] : 1 Time
 error: Protocol major versions differ: 2 vs. 1 : 2 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 16 Times
 error: kex_exchange_identification: read: Connection reset by peer : 27 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 5 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 5 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 5 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 5 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 5 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 5 Times

dictionary attacks: 740 unique usernames.

 1502 a aa aagorban abc abdi abigayle acc adam adman ADMIN Admin admin
 admin08 Administrator administrator adminspam adminuser ahmed ai airloft
 albatross alex alf ali aliases alien aliya alpha alphabet alves aly amax1
 amber america ammy amran amy anam ander andres angerine anj anon App
 app arisa ariyah arline arq arrow asshole asterisk athena atmosphere
 autcom avelychko ayw azureadmin backups baofei baoluo barsha basic
 bbs bcy beaver beck berkeley bhwang bicameral bigdata bilal bingoadm
 bishop bitch bitrix bjy blm blu bob boris bosstt bot braun bsnl btserver
 bumbling cam candice canpi Can't caoxiaojing caplatform caren carla
 carol castle cayuga cbd ccapp cchen cdsmgr centos cer2113b cg chandler
 changs charity charliexu chem chenhh chenjq chenshili chenwen chess Chia
 cie cistest citel clark class classic client cloudera cnsadm computer
 config connect conserver construction cooper cosmo cpu cqjyc cqs crchen
 create creation crn cs csy cudacudnn cv cys czy daifei danya danyang
 Data database datauser daveo david dbadmin dc ddw debian Dec deepfake
 deeplearn deepvoxel degen dell Demo demo deploy des dev developer device
 devops devuser dgr digital dino dinsdale disc dmdba dristi du duhuan
 dulce eagle earth easier edwin ef elasticsearch electric elephant ellen
 erica es eshiyanova esuser etherpad evangeline EXAMPLES exp extension
 fabiana_nerus fbs fengy fjd flinkprod foolproof foresight forsythe fpl
 fqq frappe freedom freshlogs fshalbaf ftp ftp_client ftpfile ftptest
 ftpuser ftpusertest function fusm fww fxl fzk galeeva gaoshen garfield
 geno1 gertrude git gituser glassfish glm godzilla golfer gongshuai
 gosling grahm groot gspanos guandata guest gumption gun guoshuai gx
 gywei gyzheng1997 hadi hadoop haoli hartman hbyu hc hcicloud hebrides
 hello hkzhu hlht home hongb houzhe hscroot hsli httpadmin hua huawei
 HwHiAiUser hxq hylv hzy hzzt ibm icp IEUser ilr info informix infranics
 inna installer internal internet invitado ion ircd irene iridium isp
 jackie jaiden jairo janie janine jason4 jasonyu jdf jenkins jennifer
 jester jesus jhe jiangmin jiangqian JingZhang_1 jkhuang john jordan
 joyce jrodrig jtribino julia JXtechsystem kaka kali kamil kanggang
 kanghh kannel karin kelly kenji kepo2912 kermit kerrie kibana kid kim
 king kkzpu koc koha kongxx Kouzou krista kristie kristin kristine kserge
 kyang larkin larry laser lbs lbw leah lekaren leonardo lhc lht lidongbo
 lihuan lilian linuxadmin linwenjie lisp LiuYang liuyuan liuzh lixiaoteng
 liying_zq liyiqing lizette ljd ljh1 login logs longyan lorraine lpadmin
 lsc luca lucius lve lynn lzp3 lzy magic mahailon malik mapr mapred marian
 marni marty Masakazu masakazu mashuming master maurice mazutislab mbobo
 meagan members mengchao mepro mhx2 mike mina minecraf minecraft miner
 mininet minpengfei mira mom monitor morozcob mosquitto mother motivate
 moyifan mts murali mxq myadmin mysql mysqlserver myuser nagios nanjing
 natasha netlink network newuser nginx nick nieshuaibao nikolay nima
 ningyuanyong njzt nk NL5xUDpV2xRa nlb noc node (none) not novinhost
 NSA null nvidia ocelot ociispth odoo ods ojspdemos olivier omnisky op
 openeuler openfiler openhabian operator ops oracle orauat orwell osmc
 outlaw owncloud oxford pacific pakistan panda papers pariah patricia
 peace penis pi pierre plymouth podcast pos postgres praise presto
 program public puneet pupkin pw q qfi qik qinwei qsecofr quartz qwadmin
 rabbit rabbitmq raianef Raidon rantest rebeca rex rfas rich rig03 risc
 rishu RLuo robotics roman ROOT rstudio-server rtvm ruima ruth rxYu ryan
 saeid samuel sandy scala seekcy sensor server service sh shalloon sham
 shardul sharepoint shenyuanqiangbm sherri shilin shirley shiva shivers
 shiyang shoply shoutcast shutdown shuttle signature silas singh single
 smb smbuser so sol solana solv sonia spotlight squid squires srvadmin
 ssa0 sshl sshvpn ssj st staci stacie stacy status stnk36 stu01 sty
 suchong Sujan sunfei super superman superuser support support1 susana
 susie syf syl sylvia sys-8650 sysadm sysadmin system szl szx tafirt tag
 tangyingmei tarun tcheng teamspeak teamspeak3 telecomadmin telecontrolt3
 temp test test001 testa tester testing testuser tf2server thomas tigger
 tk tmax8 toby tomcat tomcat7 tong tony transfer ts3 tttt tty tung
 twqq2016 ubnt ubuntn ubuntu ufly unhappy uno85 upload user user1 user3
 user9 username usrsappi util utility vagrant valentina validator vasant
 vhpadmin vicky video vintagestory virginia vision vpn vps vyos wangcp
 wanghan wanghaoyu_intern wangqing wangtn wangyuheng wangyuwei wangz
 wd wdocker web webapp webkul webmaster01 weihuang wendi wendy willie
 winter witchupan wjb wkh wmq wombat woodwind ws wujiahao wuye01 www wxt
 wyy wzk xar xdLi_Wang xgy xgy18 xiaoli xjrw xlu xubaoshuo xucongping
 xumeng xunjian xuyian xuyuqing xxp yangliangren yangxi yangyh ych ycwang
 ydjiao yftang yhinestr yifan yjr yolanda yoyo yt ythuo yue yulin yuval
 yycheng YZhang zabbix zeppelin zgJia zhanchon zhangby zhange zhangly
 zhangminLab zhangqi zhangshuai zhangtc zhangyue zhangzhenhua zhaodan
 zhaofangshi zhaokaisheng zhengx zhengyu zhouwen zhumx zhy zhz zimmerman
 zjb zjh znc-admin zs ztp zyxing zzzc
 

By using this site you agree to accept the Terms Of Service and Disclaimer. CONTACT: info at freshlogs.ca