freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Monday April 21, 2025 denied by configuration: 2.102.254.174 (host-2-102-254-174.as13285.net): 15 Times 5.182.83.231 (undefined.hostname.localhost): 11 Times 5.189.138.7 (ungeschickt.xyz): 13 Times 14.103.116.192: 5 Times 14.103.253.20: 8 Times 14.225.3.79: 4 Times 20.197.20.173: 10 Times 24.53.160.28 (cm-24-53-160-28.maxxsouthbb.net): 12 Times 24.108.102.132 (S01063c2d9ee02c1e.gv.shawcable.net): 12 Times 27.96.84.210 (ezecom.27.96.84.0.210.ezecom.com.kh): 9 Times 27.254.137.144: 12 Times 34.91.0.68 (68.0.91.34.bc.googleusercontent.com): 11 Times 35.216.136.159 (159.136.216.35.bc.googleusercontent.com): 1 Time 35.222.117.243 (243.117.222.35.bc.googleusercontent.com): 13 Times 36.255.220.3: 12 Times 43.224.249.220: 10 Times 45.70.100.116 (45-70-100-116.alphanet.psi.br): 10 Times 45.88.143.18 (18.143.88.45.static.netiwan.fr): 10 Times 45.138.158.114: 11 Times 45.158.59.57: 14 Times 45.239.138.66: 9 Times 46.101.74.125: 9 Times 47.84.41.40: 16 Times 47.250.81.7: 1 Time 49.64.242.249: 4 Times 54.37.233.240 (vps-ac1bf43a.vps.ovh.net): 26 Times 64.62.156.192 (scan-87-0.shadowserver.org): 1 Time 65.21.190.38 (static.38.190.21.65.clients.your-server.de): 4 Times 65.109.13.25 (static.25.13.109.65.clients.your-server.de): 4 Times 67.10.184.83 (syn-067-010-184-083.res.spectrum.com): 10 Times 74.94.234.151 (74-94-234-151-Michigan.hfc.comcastbusiness.net): 12 Times 78.43.142.101 (ip-078-043-142-101.um18.pools.vodafone-ip.de): 2 Times 78.109.200.147: 16 Times 79.32.27.198 (host-79-32-27-198.retail.telecomitalia.it): 7 Times 80.94.95.115: 5 Times 80.94.95.116: 10 Times 80.94.95.125: 10 Times 80.94.95.155: 9 Times 80.94.95.189: 9 Times 80.94.95.241: 9 Times 83.235.16.111 (goevthes.static.otenet.gr): 2 Times 85.86.224.176 (176.85-86-224.dynamic.clientes.reverse-euskaltel.es): 7 Times 88.214.48.10: 9 Times 88.214.48.11: 6 Times 88.214.48.17: 25 Times 88.214.48.18: 24 Times 92.118.39.68: 37 Times 101.36.65.131: 1 Time 102.211.152.45 (45.152.211.102.angolacables.ao): 2 Times 103.25.47.94 (rainbowisp.in): 4 Times 103.56.115.41: 10 Times 103.151.20.167: 12 Times 103.171.85.115 (ip103-171-85-115.cloudhost.web.id): 9 Times 103.183.75.218 (ip103-183-75-218.cloudhost.web.id): 10 Times 103.193.176.106 (ip103-193-176-106.cloudhost.web.id): 8 Times 104.199.151.189 (189.151.199.104.bc.googleusercontent.com): 12 Times 104.205.140.176 (d104-205-140-176.abhsia.telus.net): 3 Times 104.248.9.103: 16 Times 104.248.57.206: 11 Times 106.12.153.108: 4 Times 106.51.105.25 (106.51.105.25.actcorp.in): 10 Times 107.175.33.240 (107-175-33-240-host.colocrossing.com): 15 Times 115.190.34.136: 3 Times 116.110.95.222: 5 Times 116.110.214.189: 2 Times 118.122.93.139: 4 Times 118.193.45.85: 12 Times 120.48.98.125: 3 Times 120.133.83.199: 5 Times 121.18.119.82 (hebei.18.121.in-addr.arpa): 1 Time 122.96.151.110: 24 Times 125.114.64.147: 4 Times 139.59.119.25: 12 Times 146.59.236.77 (vps-2768e10e.vps.ovh.net): 13 Times 146.190.22.40 (academy.smarttourisme.net): 12 Times 151.46.189.255: 8 Times 152.32.145.111: 5 Times 152.32.185.214: 13 Times 162.240.109.153 (server.bigblazingweb.com): 13 Times 171.251.22.93 (dynamic-ip-adsl.viettel.vn): 4 Times 171.251.30.27 (dynamic-ip-adsl.viettel.vn): 5 Times 172.105.18.94 (172-105-18-94.ip.linodeusercontent.com): 1 Time 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time 172.174.5.146: 8 Times 172.245.11.102 (quiaqygav.privatpaketeblank.shop): 7 Times 177.182.181.8 (b1b6b508.virtua.com.br): 14 Times 180.184.46.145: 3 Times 181.49.50.6: 9 Times 186.124.22.55 (host55.186-124-22.telecom.net.ar): 16 Times 187.107.88.97 (bb6b5861.virtua.com.br): 14 Times 188.138.28.121 (euvds5035x26.startdedicated.de): 14 Times 188.164.196.56 (wound-job.trackshadow.net): 11 Times 192.241.129.156: 15 Times 193.176.23.6: 23 Times 193.176.23.7: 24 Times 193.233.48.53 (49584.ip-ptr.tech): 13 Times 194.0.234.16: 8 Times 194.0.234.19: 32 Times 194.65.144.243: 16 Times 195.178.110.6: 137 Times 195.211.191.125: 8 Times 196.188.63.85: 9 Times 196.251.118.52: 8 Times 202.189.254.166: 2 Times 203.25.208.110: 3 Times 203.34.57.247: 1 Time 212.98.60.188 (212-98-60-188.static.adslpremium.ch): 2 Times 218.154.201.128: 2 Times 222.222.220.108 (108.220.222.222.broad.sj.he.dynamic.163data.com.cn): 1 Time system login attempted: sshd : 1 Time bin : 1 Time nobody : 2 Times root : 888 Times sync : 1 Time uucp : 1 Time www-data : 1 Time received disconnect: [preauth] : 317 Times Bye Bye [preauth] : 1136 Times Bye [preauth] : 48 Times Disconnected from invalid user 80.94.95.155 port 28391 [preauth] : 1 Time error: Protocol major versions differ: 2 vs. 1 : 4 Times error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 2 Times error: kex_exchange_identification: read: Connection reset by peer : 11 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times dictionary attacks: 548 unique usernames. 1 1111 123 1234 12345 1502 a a1 aaaa abc abhishek abi abra ace ada adm ADMIN Admin admin admin1 administrator adminuser ai aiftp alarm aleks alex alin alpha amin amir analytics andrew anil anon anonymous ansadmin ansible apache2 appadmin aria array arthur azure b BACKUP backups behnam bit bitrix bittensor bnb bob book boss bot btc carlos casaos cbprl cgadmin cgonzalez chris chrome cisco citel coding cody compiler config cosmo cosmos couchdb ct culture cxy d dad daftar daniel daniil db2inst1 dbadmin db_user dc deb debian default dell Demo demo demos den denis dennis deploy deployer deployhq deployment desarrollo dev devadmin developer device devuser diego dima director discord doge dot dq drp dspace ec2-user edge edu egarcia elasticsearch elena emcali ems engineer es esearch eth evgeny exam EXAMPLES faridpasha fernando FFF0xFFDE23 filecoin flink freelancer freshlogs frontend front-user ftp ftpadmin ftproot ftptest ftpuser gameserver gandalf gao gcs Gearguy geo geoeast gh git gitea gitlab gitlab-runner gitolite gnssr goeun gpu graylog greenblue group4 gts guest guest1 gustavo habib hacluster hadoop halo harish hassan hduser hector help hengl hg himanshu host hpc hsm http hw hwrpp hxw ibrahim igor ikeda in installer instrument int intern ionela isa isaac james jason javid javier jc jenkins jerry jiaqi jin jinkun jitu jmuser joe john joseph josh jp jrodriguez jupyter jurist justin jy kadmin kafka kevin kim king kingbase kkk koha kube kwinfo kyivstar lab lara lchen lee legal lg lhf liam linda lisha lisi lizhang ljh localhost login lorena lotus lpadmin lu luciano luke luz lyes machine macro magazyn mahsa mailserver manager manuel map marc maria marine mark mary master mateo matin matrix maximo mcserver mgts mike minecraft misha mohan moises monitor moon morteza moslem mssql mts mysql mzz nader nagios naman natasha nathan nav netscreen neutron new newtest newuser nextcloud nftp nikita nikola NL5xUDpV2xRa nmt node nodeuser (none) NSA nsroot odin odoo oleg oliver omkar omuser2 onlime_r ons OO opc openeuler operator ops oracle ospite pan partha patidaronline patrick payara pb peace personal petar peter pharmacy phase pi piotr PlcmSpIp post postgres postmaster pratik presence pro profesor promise prueba prueba2 public pujie qiying r radius radmin rahim rahul ramesh rana rancher reader reception reda renato rene reporting reza rig rise rizal rollserv root999988 rootuser roshan router RPM ruhul runner sadmin saeed sammy santhosh scan scans scm scott scs sduran se sergey server service setpriv sftp sftptest shawn shiyi shlee sirius siva sjh smn snow sns soft soksuser sol solana sonarqube sonic sonos sonya squid ssh sshadmin sshuser steam steam1 steamcmd stephan storage strapi student student1 student3 su Sujan sunny sunrise super supervisor suporte support support1 svk syncuser sysadmin system sz tan teamspeak tele telecomadmin temp temp1 TEST test test1 test2 test3 teste tester test-user testuser testuser1 theo tin toby tom tomcat tongxin topstd trade transfer trouble ts tz ub ubnt ubuntu ubuntu22 ugo umesh unaih usdc usdt User user user1 user2 user3 user4 user9 user-backup userone usman usuario utente valerie validator vanessa vas vasil vdr vector vera vhserver3 victor viewer viola vishnu vpn vps walter wangjian wangjie wangyu wasadmin web web1 webadm webadmin webapp webshield whmcs whz wifi wireguard wjm wms woc wp wwUser wwww xiaolin xm xrp xtm xxx yangj yangxiaomei yangy ydy yinshishu yogesh yw yxsong yyh zaneta zel zh zhangjianguo zhangp zhangxf zhanna zjh zou zuomin zxin10 zzz