freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Saturday April 12, 2025 denied by configuration: 2.228.25.92 (2-228-25-92.ip189.fastwebnet.it): 14 Times 8.221.139.48: 1 Time 14.103.112.233: 4 Times 14.103.115.210: 9 Times 14.103.140.196: 2 Times 14.152.66.29: 4 Times 14.246.5.181 (static.vnpt.vn): 2 Times 18.97.5.127 (ec2-18-97-5-127.compute-1.amazonaws.com): 1 Time 27.78.70.157 (localhost): 16 Times 36.133.246.42: 2 Times 37.204.226.204 (broadband-37.204-226-204.ip.moscow.rt.ru): 16 Times 45.135.193.100: 8 Times 45.148.10.240: 37 Times 46.20.5.68 (protect.netboss.com.tr): 16 Times 46.28.95.178: 2 Times 47.180.114.229 (47-180-114-229.944e76fe48b133ae6f88b784db937d44.ip.frontiernet.net): 19 Times 47.254.192.213: 1 Time 51.83.98.100 (vps-7c4217f7.vps.ovh.net): 20 Times 64.62.197.9 (scan-36h.shadowserver.org): 1 Time 65.49.1.184 (scan-74-02.shadowserver.org): 1 Time 65.254.93.250 (65-254-93-250.syd02.dsuser.network): 18 Times 73.63.161.21 (c-73-63-161-21.hsd1.ca.comcast.net): 11 Times 74.208.133.97: 16 Times 75.119.134.37 (vmi948852.contaboserver.net): 4 Times 80.94.95.57: 6 Times 80.94.95.125: 7 Times 80.94.95.155: 8 Times 80.94.95.189: 8 Times 80.94.95.241: 9 Times 81.91.218.18: 2 Times 83.9.218.24 (83.9.218.24.ipv4.supernova.orange.pl): 1 Time 83.222.191.218: 1 Time 92.255.85.37: 32 Times 92.255.85.107: 29 Times 92.255.85.189: 1 Time 92.255.85.253: 12 Times 96.78.175.36: 3 Times 101.126.91.34: 3 Times 103.70.114.33: 1 Time 103.70.115.127: 1 Time 103.83.86.84 (contato2.soentregainter2025.com): 11 Times 103.140.127.149: 16 Times 103.197.184.162: 1 Time 104.214.117.63: 4 Times 106.12.153.108: 4 Times 117.27.93.170: 1 Time 117.63.170.153: 7 Times 119.93.23.178 (119.93.23.178.static.pldt.net): 16 Times 120.48.98.125: 5 Times 121.229.56.202: 1 Time 122.96.151.110: 29 Times 122.160.201.198 (abts-north-static-198.201.160.122.airtelbroadband.in): 3 Times 123.58.212.181: 4 Times 139.19.117.129 (inet-research-scan-5.mpi-inf.mpg.de): 8 Times 139.99.170.10 (senter75.grizzlybear.auction): 12 Times 146.190.22.40 (academy.smarttourisme.net): 12 Times 147.50.227.79: 1 Time 148.66.156.78: 8 Times 172.96.254.153 (172.96.254.153.16clouds.com): 91 Times 178.204.237.237: 2 Times 181.115.178.66: 16 Times 181.176.156.130: 1 Time 185.7.214.37: 30 Times 185.7.214.74: 1 Time 185.42.12.240: 27 Times 185.213.165.58 (static.58.165.213.185.clients.irandns.com): 12 Times 185.221.237.126: 1 Time 186.216.42.210: 4 Times 193.32.162.136: 2 Times 194.0.234.16: 1 Time 194.0.234.107: 1 Time 195.178.110.76: 30 Times 195.178.110.207: 28 Times 195.211.191.125: 5 Times 196.251.87.45: 1 Time 196.251.87.74: 1 Time 196.251.88.103: 1 Time 198.12.85.199 (198-12-85-199-host.colocrossing.com): 11 Times 198.211.110.93: 22 Times 201.48.78.29 (201-048-078-029.static.ctbctelecom.com.br): 10 Times 202.55.182.76: 15 Times 209.38.228.147 (core1.bbe.masterit-dev.cloud): 20 Times 216.24.191.168 (216.24.191.168.16clouds.com): 6 Times 217.160.16.155: 27 Times 222.107.251.147: 6 Times system login attempted: daemon : 1 Time nobody : 1 Time root : 1312 Times sync : 1 Time uucp : 2 Times received disconnect: [preauth] : 362 Times Bye Bye [preauth] : 1164 Times Bye [preauth] : 38 Times Client disconnecting normally [preauth] : 1 Time drop connection #10 from [111.67.199.209]:32984 past MaxStartups : 1 Time drop connection #10 from [111.67.199.209]:33020 past MaxStartups : 1 Time drop connection #10 from [111.67.199.209]:45904 past MaxStartups : 1 Time drop connection #10 from [216.24.191.168]:55038 past MaxStartups : 1 Time drop connection #11 from [111.67.199.209]:47320 past MaxStartups : 1 Time drop connection #11 from [111.67.199.209]:56044 past MaxStartups : 1 Time drop connection #11 from [111.67.199.209]:57924 past MaxStartups : 1 Time drop connection #11 from [14.152.66.29]:44620 past MaxStartups : 1 Time drop connection #12 from [111.67.199.209]:45310 past MaxStartups : 1 Time drop connection #12 from [111.67.199.209]:49440 past MaxStartups : 1 Time error: Protocol major versions differ: 2 vs. 1 : 1 Time error: beginning MaxStartups throttling : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 2 Times error: kex_exchange_identification: read: Connection reset by peer : 12 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times exited MaxStartups throttling after 00:03:23, 10 connections dropped : 1 Time fatal: userauth_finish: send failure packet: Connection reset by peer [preauth] : 3 Times dictionary attacks: 439 unique usernames. 123456 1502 7moor abc acc ad Admin admin admin08 admin1 admin123 Administrator administrator adminuser ahmad ak albert alex ali alice alicia alien amin amits anaconda andrea angel anita anon ansadmin ansible api applprod arif arthur axway aziz azureuser backman baikal bayu bazy03 bbs bitwarden bot botuser bridge btc bvpn careers cc centos certbot ch chatbot chia chromeuser cindy Cisco citel client comp config core craft crn crypto cs2server cuc daniel dasusr1 david db2admin db2inst1 debian debianuser default defi dell DEMO Demo demo denis deploy dev devops DHan ding dingtalk distribution doc docker dockeruser dolphin download dspace dstorage eagle edge elastic elasticsearch elias emcali eoffice erp es eth eugene exam EXAMPLES ezi factorio fish flink francisco frappe free freshlogs ftp ftptest ftpuser fu fw gary ghost git gitlab gns3 gocloud Guest guest gwuser hadoop hang hdoop hello hscroot httpadmin httpfs huawei ian IEUser info io ionadmin isp j jack jay jenkins jim jimmy jinyu jito jmarquez joggler josh joyce jrodrig juliette june jupyter k8s kafka kali kaveh kernel kevin kitchen kodi kris lab lalita lcx lee leo letmein magdalena magento mai7 major mamad marcel marcus maria mario mary master mcserver mcuser media mega melissa mgeweb mgts minecraft mm mohammad mongod monitor mother mts mustafa mutua mysql nabi natasha netadmin netlink newsletter newuser nexus nicolas nino nlp nmrsu nmt node nokia (none) NSA nsroot nushi ociispth office olga onlime_r oo op opc openhabian openvswitch operador operator oracle osmc paolo paula pc pedro pepe peter phil photo PLMIMService portal postgre postgres pranav prueba psybnc public publico publicuser puneet pw qa qemu qiyuesuo qsecofr radius ranger readonly redmine reloj render retail rftest richard rico rita robin robot rock rocky roger root1 root2 rootftp roott rootuser royal rstudio rudi rune rust ryan sa saara saas salam salman sam sammy samr sconsole scott sec serena sergey server service services setup sFTPUser sftpuser shawna shred shredstream sinusbot sistemas site smr snarkos Sol sol solana solana-validator solr sonar sonarUser spark spring squid sshuser status steam steve storage sun sunrise super superuser superv suporte support support1 sysadm sysadmin system t128 tcuser teamtalk tech technicolor teest tele telekom temp test test1 test10 test123 test3 test_user testuser testwww tezos thomas timur tina tomcat tpaterni tscan tuser tyk ubuntu ubuntuserver uftp upgrade upload usdc user user01 user02 user06 user1 user10 user2 user3 useradmin usertest usman usuario1 v5-admin vagrant vaibhav vale valentin valera valheim validator vhpadmin vhserver victor vinay vintagestory vmail vps vyos wallet walter wasadmin water web weblogic webuser whatsapp windows wisdom work wwUser www wwwproxy x xavier xbox xch xdc xmr xt yogi ysz yt yuli yulia yx yzy zabbix zahar zc zeeshan zenith zhangsan zhihong zmarin zora zqliu zxg