freshlogs is the concept
see Disclaimer and Terms of Service. Use index.txt for complete long lines. Use prev-index.d for previous posts.
Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box.. added a list of unique usernames from dictionary attacks.
Wednesday August 20, 2025

denied by configuration:

 14.103.104.36: 1 Time
 14.103.123.73: 2 Times
 43.159.41.58: 7 Times
 44.220.188.201 (ec2-44-220-188-201.compute-1.amazonaws.com): 1 Time
 44.220.188.244 (ec2-44-220-188-244.compute-1.amazonaws.com): 1 Time
 45.78.192.23: 4 Times
 45.134.26.79: 28 Times
 45.135.232.92: 15 Times
 45.135.232.177: 29 Times
 45.140.17.124: 25 Times
 45.169.200.254: 2 Times
 62.219.172.50 (bzq-219-172-50.dsl.bezeqint.net): 4 Times
 64.62.156.130 (scan-80-8.shadowserver.org): 1 Time
 77.83.240.47 (.): 11 Times
 78.128.112.74 (ip-112-74.4vendeta.com): 12 Times
 78.142.41.167: 1 Time
 79.160.58.123 (123.79-160-58.customer.lyse.net): 2 Times
 80.94.95.112: 49 Times
 86.54.25.119: 15 Times
 93.123.109.181: 21 Times
 94.31.140.14 (94.31.140.14-FTTB.planeta.tc): 4 Times
 103.176.78.28 (ip103-176-78-28.cloudhost.web.id): 1 Time
 103.217.145.154 (ip103-217-145-154.cloudhost.web.id): 1 Time
 107.172.146.104 (107-172-146-104-host.colocrossing.com): 3 Times
 107.173.85.161 (107-173-85-161-host.colocrossing.com): 1 Time
 111.119.234.186: 27 Times
 113.11.231.140: 2 Times
 119.41.150.53: 5 Times
 120.48.98.125: 6 Times
 129.226.92.247: 2 Times
 152.42.254.23: 1 Time
 156.54.212.44: 6 Times
 160.22.195.101: 3 Times
 160.30.112.225: 5 Times
 160.30.200.25: 4 Times
 162.144.192.82 (server.iabcanada.com): 5 Times
 165.232.95.247: 14 Times
 170.83.79.28 (170-83-79-28.galanet.com.ve): 3 Times
 170.83.79.30 (170-83-79-30.galanet.com.ve): 1 Time
 171.243.148.63 (dynamic-ip-adsl.viettel.vn): 5 Times
 171.243.151.254 (dynamic-ip-adsl.viettel.vn): 4 Times
 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time
 183.78.180.217: 4 Times
 185.93.89.4: 36 Times
 185.156.73.233: 39 Times
 193.24.211.3 (Support.mIRC-Scripters.eXplotom.Net): 1 Time
 194.0.234.19: 35 Times
 194.0.234.93: 7 Times
 195.3.147.88: 3 Times
 196.251.88.103: 1 Time
 205.185.127.70 (phone.ready.place): 1 Time
 210.71.231.7 (210-71-231-7.hinet-ip.hinet.net): 83 Times
 213.6.203.226: 4 Times

system login attempted:

 sshd : 3 Times
 bin : 1 Time
 nobody : 3 Times
 root : 668 Times
 uucp : 2 Times

received disconnect:

  [preauth] : 131 Times
 Bye Bye [preauth] : 365 Times
 Bye [preauth] : 91 Times
 Client disconnecting normally [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 12572 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 1286 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 16118 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 2341 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 24171 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 24931 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 25260 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 30978 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 32930 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 33474 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 35915 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 45141 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 53223 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 53859 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 55206 [preauth] : 1 Time
 Disconnected from invalid user  185.93.89.4 port 7846 [preauth] : 1 Time
 error: Protocol major versions differ: 2 vs. 1 : 2 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 1 Time
 error: kex_exchange_identification: read: Connection reset by peer : 26 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times

dictionary attacks: 237 unique usernames.

 0 1 1111 1234 12345 1502 8 a aaaa aaPower abc acc adfexc adm admin Admin1
 administrator aman anon anonymous ansible app array aso ayanna BACKUP
 backups baikal bbs brian c2 cardano chris cims.user Cisco config CSG css
 daniel db2fenc1 db2inst1 debian default dell Demo demo deploy deployer
 dev director dmdba doge draytek dspace dvs eagle emcali engineer erick
 erp ethereum factory family frank frappe frederick freshlogs frontend
 ftp ftp_user ftpuser git github gpadmin grid Guest guest guillermo
 hacluster hadoop hang hp i images informix install installer instrument
 irina isp jane jayda jenkins Jirka jito joyce julio justice kafka karissa
 karl kevin kevon khalid kodi kyivstar lab lexi localhost louis lpadmin m
 maddison mahesh main manage manager maria mary master matrix max maxadmin
 minh monitor moth3r mother mw mysql natasha netlink netscreen netweb
 newuser nikola node (none) nrk nsroot odoo office onlime_r OO openhabian
 openproject operator oracle osboxes osmc phoebe pi PlcmSpIp PLMIMService
 postgres precious pritchard prueba prueba1 ps public pwrchute Q qsecofr
 qsrvbas qtum qwerty R richard RPM rsync saas sam scpuser serenity service
 servidor setpriv setup site smr snx sol solana solv source squid srt
 sshadmin steam steve Sujan super superuser support sysadmin system
 tcuser teamspeak telecomadmin telnet temp terra TEST test test1 teste
 testing1 test_user testuser tomcat tpuser ts ubadmin ubnt ubuntu usdt
 user user01 user1 user123 user2 username usuario vagrant validator vpn
 vpn1 vyos web weblogic webshield wordpress www ydy yesung yybpc zhangc
 

By using this site you agree to accept the Terms Of Service and Disclaimer. CONTACT: info at freshlogs.ca