freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Tuesday April 15, 2025 denied by configuration: 14.29.198.130: 1 Time 14.103.37.100: 4 Times 14.103.118.167: 7 Times 14.103.204.23: 6 Times 27.112.78.170 (ip27-112-78-170.cloudhost.web.id): 20 Times 27.254.137.144: 19 Times 34.171.131.12 (12.131.171.34.bc.googleusercontent.com): 3 Times 36.41.173.185: 1 Time 38.22.160.113: 14 Times 43.134.109.234: 20 Times 45.95.233.112 (41589.ip-ptr.tech): 14 Times 45.148.10.79: 5 Times 46.20.5.122 (protect.netboss.com.tr): 2 Times 47.245.86.42: 1 Time 51.79.165.186 (vps-9ad9e4ee.vps.ovh.ca): 18 Times 58.49.26.202: 6 Times 62.36.40.104 (mail1.prevecam.es): 12 Times 65.49.1.142 (scan-70-00.shadowserver.org): 1 Time 68.183.6.60: 16 Times 72.2.252.161 (72-2-252-161.pool.dsl.bbtel.com): 1 Time 74.116.2.85 (server01.aldeer.com): 15 Times 80.94.95.112: 8 Times 80.94.95.115: 6 Times 80.94.95.116: 8 Times 80.94.95.155: 4 Times 80.94.95.189: 3 Times 80.94.95.241: 11 Times 82.140.0.119: 1 Time 83.222.191.218: 1 Time 85.198.10.65 (85.198.10.65.asiatech.cloud): 20 Times 91.228.127.246: 20 Times 92.118.39.65: 16 Times 92.246.143.46: 21 Times 92.255.85.37: 36 Times 92.255.85.107: 29 Times 92.255.85.188: 5 Times 92.255.85.189: 8 Times 92.255.85.253: 12 Times 101.34.242.152: 4 Times 101.126.54.95: 2 Times 103.13.206.142 (shiina.weblify.biz.id): 17 Times 103.70.115.15: 2 Times 103.172.205.14 (ip103-172-205-14.cloudhost.web.id): 15 Times 103.172.236.15: 19 Times 103.189.235.176 (ip103-189-235-176.cloudhost.web.id): 22 Times 103.197.184.12: 1 Time 103.197.184.162: 1 Time 106.12.153.108: 3 Times 111.67.196.52: 5 Times 112.111.39.218: 5 Times 112.219.151.50: 2 Times 120.48.98.125: 4 Times 121.227.31.13: 3 Times 122.96.151.110: 28 Times 123.59.135.110: 4 Times 130.61.224.219: 1 Time 134.122.12.255: 4 Times 143.202.162.201: 18 Times 144.24.170.45: 19 Times 146.190.22.40 (academy.smarttourisme.net): 12 Times 147.182.194.88: 21 Times 148.113.172.199 (vps-c3b672a8.vps.ovh.ca): 1 Time 150.165.85.123: 19 Times 151.46.194.58 (adsl-ull-58-194.46-151.wind.it): 1 Time 152.32.213.189: 21 Times 154.92.19.22: 18 Times 154.209.4.55: 21 Times 154.221.29.120: 4 Times 157.245.131.45: 4 Times 160.191.52.73: 1 Time 162.214.92.14 (server.qtd.fxo.mybluehost.me): 18 Times 165.232.100.223: 11 Times 185.7.214.37: 25 Times 185.42.12.240: 25 Times 185.178.147.103: 17 Times 186.96.145.241 (fixed-186-96-145-241.totalplay.net): 12 Times 187.6.131.225: 18 Times 187.137.0.123 (dsl-187-137-0-123-dyn.prod-infinitum.com.mx): 1 Time 193.32.162.89: 32 Times 193.32.162.136: 2 Times 193.32.162.185: 2 Times 194.0.234.16: 5 Times 194.0.234.19: 7 Times 195.211.191.125: 5 Times 196.251.67.42: 1 Time 196.251.69.43: 1 Time 196.251.69.116: 2 Times 196.251.83.136 (undefined.hostname.localhost): 1 Time 196.251.85.62: 1 Time 196.251.87.42: 1 Time 196.251.87.74: 2 Times 200.225.246.102 (200-225-246-102.dynamic.idial.com.br): 24 Times 203.86.255.216: 5 Times 210.16.189.143: 3 Times 218.154.201.128: 1 Time 223.68.169.181: 3 Times 223.240.122.228: 5 Times system login attempted: bin : 2 Times nobody : 2 Times root : 881 Times www-data : 2 Times received disconnect: [preauth] : 223 Times Bye Bye [preauth] : 1093 Times Bye [preauth] : 48 Times Disconnected from invalid user 80.94.95.155 port 59191 [preauth] : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times error: kex_exchange_identification: read: Connection reset by peer : 18 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times fatal: userauth_finish: send failure packet: Connection reset by peer [preauth] : 2 Times dictionary attacks: 442 unique usernames. 0 1 1234 a a3user abc acc ada adfexc adm ADMIN admin admin08 admin1 admin123 Administrator administrator admins aida akbar ali alina aminata amits amssys andrea andres anon anonymous ansible apache app arif ark armen asad aso aspnet asteriskftp azure backend baikal bbb bender bitwarden bot brenda bwadmin cad cam cardano carlos cel ceshi cgpexpert chc cisco clamav clement cloud config dance daniel dat data david db2fenc1 db2inst1 dbuser debian default demo deploy deployer deployuser dev developer development devops devuser director django dmdba dockeruser dolphin dot draytek dspace eagle ec2-user elastic elasticsearch elemental elsearch erik erp erpnext es eth ethereum etherpad exam EXAMPLES exx faisal fastuser fil freshlogs ftp ftp_client ftp_user ftpuser gautam gbasedbt gino git github gitlab gpadmin Guest guest guo gustavo hacluster hadoop hadoopuser hamza hasan hello hive hrm IEUser im images info informix install intel ir isp jack james jenkins jerry jesus jimmy Jirka jito jj joanna k8s keith kelly kevin khalid kk kocom kodi kyivstar lee letmein lhy lifesize lighthouse lily link liyang login loginuser lou lpadmin lrendon lx maarch mac maha manage manager markus master matic maxadmin mc mcadmin mcserver media metricbeat mgts michael michalel mina minecraft mitchell mom monitor mostafa mother myftp mysql n namrata nasrin natali netscreen new newadmin newuser nexus nikhil nikolay nino NL5xUDpV2xRa node nokia (none) noreply nutanix odoo13 odoo15 office okx omm oneadmin oo openbravo openhabian openvpn operation operator oracle orange ori oscar otsmanager pal panda parts paulina payam peertube phoenix pi PLMIMService pls pop pos postgre postgres postmaster pre pritchard proxyuser prueba prueba2 public publico pzuser q qiyuesuo qsecofr qsrvbas qtum rafael rahul ramin ranger rasel ravencoin ravindra rayan readonly renato reza rftest ricardo rich richard rinet robert rokos roma rootftp router royal ruslan s1 sa saeed sam sameer samr sandbox sandeep satis scm scott se sergey server service setpriv setup sfserver sftp sftpuser01 share sipv sistemas sites sky slave snarkos software sol solana solx sonaruser sonos sophie squid ssh sshadmin steam steve storage stperez student07 su Sujan super superman supervisor suporte support support1 suraj switch SYS sysadm sysadmin .syslog system tab tcuser team4 teamspeak tech tecmint telco telecomadmin temp tempuser TEST test test002 test01 test1 test12 test2 test3 test6 testftp testone testtest testuser tim timo timur tk tkj tom tomcat ton toor tpaterni trouble trustix trx ts ts3 ts3user tunnel uap ubnt ubuntu udin uftp uni unison upload User user user02 user1 user10 user13 user2 user8 username usman usuario utente vagrant vali validator vasya vbird3 vi-admin visionupdater vivek vpn vps vsftp walle walter wangziyun wasadmin water web WebAdmin webadmin webapp weblogic webmaster webmin webuser weimin wing www x xray xu yanhua yogi yx yzh zhangsan zhaopeng zhou zk zookeeper zs