freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Saturday April 26, 2025 denied by configuration: 14.103.54.150: 4 Times 14.103.116.173: 2 Times 14.103.123.75: 2 Times 27.110.166.67 (ns2.revlv.net): 10 Times 45.239.131.117: 15 Times 45.239.139.11 (10redeintra139.masterturbonet.com.br): 14 Times 52.183.128.237: 12 Times 58.69.56.44 (58.69.56.44.pldt.net): 14 Times 58.211.191.14: 1 Time 59.36.254.224 (224.254.36.59.broad.jm.gd.dynamic.163data.com.cn): 4 Times 64.62.197.228 (scan-51b.shadowserver.org): 1 Time 65.21.190.38 (static.38.190.21.65.clients.your-server.de): 5 Times 65.108.83.12 (static.12.83.108.65.clients.your-server.de): 4 Times 74.225.187.72: 10 Times 79.104.0.82: 12 Times 80.94.95.112: 7 Times 80.94.95.115: 4 Times 80.94.95.116: 4 Times 80.94.95.125: 12 Times 80.94.95.155: 8 Times 85.18.236.229 (85-18-236-229.ip.fastwebnet.it): 8 Times 88.214.48.10: 3 Times 88.214.48.11: 1 Time 88.214.48.16: 9 Times 88.214.48.17: 29 Times 88.214.48.18: 30 Times 92.118.39.61: 30 Times 92.222.177.43 (vps-e508bda4.vps.ovh.net): 13 Times 95.79.112.59 (95x79x112x59.static-business.nn.ertelecom.ru): 12 Times 96.67.59.65: 14 Times 101.100.220.34 (v22351305.sin01.serveradd.com): 10 Times 103.26.136.173 (mail.gshakti.org): 12 Times 103.129.221.147: 4 Times 103.180.177.170: 13 Times 103.181.143.10: 3 Times 103.197.184.219: 5 Times 106.12.153.108: 3 Times 106.60.69.136: 1 Time 107.174.159.143 (107-174-159-143-host.colocrossing.com): 10 Times 107.175.39.135 (107-175-39-135-host.colocrossing.com): 12 Times 108.85.73.157 (108-85-73-157.lightspeed.wlfrct.sbcglobal.net): 8 Times 109.75.33.121 (host-121.33.75.109.ucom.am): 13 Times 111.173.105.55: 4 Times 112.134.142.116 (v4.dns.slt.lk): 2 Times 116.98.160.95 (dynamic-ip-adsl.viettel.vn): 5 Times 116.110.119.125: 4 Times 117.33.249.211: 16 Times 117.50.55.96: 3 Times 119.96.168.145: 12 Times 120.48.98.125: 5 Times 120.194.62.119: 2 Times 121.204.179.231 (231.179.204.121.broad.xm.fj.dynamic.163data.com.cn): 8 Times 121.227.152.250: 10 Times 121.229.0.135: 8 Times 122.96.151.110: 21 Times 122.176.122.24 (abts-north-static-024.122.176.122.airtelbroadband.in): 13 Times 134.122.191.205: 13 Times 136.232.11.10: 7 Times 137.184.114.25: 14 Times 138.197.116.43: 10 Times 138.199.157.33 (static.33.157.199.138.clients.your-server.de): 13 Times 146.190.22.40 (academy.smarttourisme.net): 11 Times 147.182.194.88: 14 Times 152.32.145.111: 6 Times 152.32.216.2: 12 Times 157.245.196.40: 9 Times 159.65.137.65: 8 Times 159.223.9.242: 57 Times 160.191.52.73: 4 Times 162.240.228.182 (162-240-228-182.unifiedlayer.com): 11 Times 163.172.50.15 (163-172-50-15.rev.poneytelecom.eu): 16 Times 165.154.20.207: 12 Times 172.86.92.174 (174.92.86.172.static.cloudzy.com): 4 Times 172.245.88.167 (172-245-88-167-host.colocrossing.com): 10 Times 178.128.157.130: 12 Times 178.247.165.246: 1 Time 180.184.178.165: 1 Time 181.143.226.68 (webmail.fabysport.com): 14 Times 183.110.116.126: 11 Times 185.60.136.39: 14 Times 185.255.91.221 (static.221.91.255.185.clients.irandns.com): 14 Times 186.96.145.241 (fixed-186-96-145-241.totalplay.net): 2 Times 187.111.28.131 (mvx-187-111-28-131.mundivox.com): 14 Times 187.170.74.95 (dsl-187-170-74-95-dyn.prod-infinitum.com.mx): 13 Times 187.210.77.100 (customer-187-210-77-100.uninet-ide.com.mx): 12 Times 189.7.17.61 (bd07113d.virtua.com.br): 5 Times 189.126.4.42 (42-189-126-4.gabandalarga.com.br): 4 Times 190.85.15.251: 11 Times 192.227.211.119 (192-227-211-119-host.colocrossing.com): 9 Times 193.32.162.130: 40 Times 193.176.23.6: 27 Times 193.176.23.7: 28 Times 194.0.234.19: 3 Times 196.251.69.91: 5 Times 196.251.87.42: 5 Times 196.251.87.54: 5 Times 197.5.145.73: 14 Times 202.103.55.158: 6 Times 202.168.179.141: 13 Times 203.104.43.41: 8 Times 206.217.133.9 (206-217-133-9-host.colocrossing.com): 11 Times 209.38.37.108: 3 Times 210.90.155.79: 10 Times 211.20.10.199 (211-20-10-199.hinet-ip.hinet.net): 2 Times 218.154.201.128: 2 Times 221.229.103.137: 5 Times system login attempted: sshd : 1 Time bin : 1 Time games : 1 Time mail : 1 Time nobody : 3 Times root : 871 Times sync : 1 Time uucp : 1 Time www-data : 1 Time received disconnect: [preauth] : 288 Times Bye Bye [preauth] : 1174 Times Bye [preauth] : 29 Times Disconnected from invalid user 80.94.95.155 port 34573 [preauth] : 1 Time drop connection #10 from [111.67.201.36]:55926 past MaxStartups : 1 Time drop connection #10 from [134.122.191.205]:38568 past MaxStartups : 1 Time drop connection #15 from [111.67.201.36]:58518 past MaxStartups : 1 Time drop connection #15 from [121.204.179.231]:38094 past MaxStartups : 1 Time drop connection #16 from [111.67.201.36]:55504 past MaxStartups : 1 Time drop connection #18 from [111.67.201.36]:45396 past MaxStartups : 1 Time drop connection #18 from [111.67.201.36]:53212 past MaxStartups : 1 Time drop connection #18 from [111.67.201.36]:53574 past MaxStartups : 1 Time drop connection #18 from [111.67.201.36]:54254 past MaxStartups : 1 Time drop connection #18 from [111.67.201.36]:56552 past MaxStartups : 1 Time drop connection #18 from [111.67.201.36]:56770 past MaxStartups : 1 Time drop connection #18 from [218.92.0.231]:10968 past MaxStartups : 1 Time drop connection #19 from [111.67.201.36]:34092 past MaxStartups : 1 Time drop connection #19 from [111.67.201.36]:43726 past MaxStartups : 1 Time drop connection #19 from [111.67.201.36]:51148 past MaxStartups : 1 Time drop connection #19 from [111.67.201.36]:54850 past MaxStartups : 1 Time drop connection #19 from [138.197.116.43]:52724 past MaxStartups : 1 Time error: beginning MaxStartups throttling : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 3 Times error: kex_exchange_identification: read: Connection reset by peer : 17 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 3 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 3 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 3 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 3 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 3 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 3 Times exited MaxStartups throttling after 00:03:57, 17 connections dropped : 1 Time dictionary attacks: 606 unique usernames. 1 1111 1234 123456 1502 a aaPower abc adfexc adm Admin admin Admin1 admin1 admin123 admin1234 Administrator administrator aida alex alexis alice alien aliyun allan alma amalia amir anaconda ander anon app ara arjun asag asim attaullah autumn ayaz azureuser backend BACKUP bahar barbara besadmin beth bharath bill bitrix bkp bob bobo boss bot botuser branch branchadmin btc btc1 candy ceo ceshi cgadmin check chrome circleci cisco citel clamav cluster coco colibri common config confluence copia cristian crypto cs2server csgo cts cumulus cxz cy cyber dada damon daniel daniela danielle dashboard david db2inst1 dbadmin dbseller dbuser dc ddd debian debianuser deepak degen delegate dell DEMO demo deng denis deploy deployer desliga dev developer device dias dict diego director discordbot docker dog dogecoin dominic donald doremi dps drupal ds ec2-user ehsan elaine elsa emc emcali enzo eric erick erp es es_user eth ether ethereum ethereumdocker example EXAMPLES facai factura fad fatima federico fengyun fh filecoin filezilla flavia fmaster forest freshlogs fs ftpguest ftpmedia ftp_user ftpuser ftpuser1 fw gaoxin garrett gast gedas gf gianluca git github gitlab-psql gitlab-runner glen global gm gnssr gs gsy Guest guest guo gwei hacluster hadi hadiqa hadoop halo haorui harry hector hello helpdesk hengl herman hery hh hjm hl hmehrabani hpc hpc-riscv hr hrp hscroot huili huong hw hyc hyliu hyperchain ian info install installer iot iptv it iva ivan jack jake jay jayden jchen jeckson jellyfin jenkins jeremy jhon jin Jirka joaquim joe john jon jordan jose josiah joyce juan julius jw k2024 kafka kamala kamil karen karimi khalid kid kodi koeskurnia krodriguez laksmi lando lea lee levi lh lhy liangming lighthouse lili liqi liu liujin liull live liyang logstash lol lotus lx lyt macuser magento_user mahmoud maint maintain majid mamy manage manager mapred maria mark maroof mati matrix max maxwell maya mcbserver mcserver me media mehdi mehrzad mercury meteo michal michele minecraft minima mkh mmj mohamad mohammed mojtaba monitor monitoreo mori mostafa mother mysftp mysql myuser nana nancy nasrin nc netscreen newftpuser newtest newuser nexus nikita niklas nmt noc node node1 nokia nominatim (none) notebook NSA nsroot odoo odoo15 odoo17 oem office oleg omm oneadmin onlime_r OO openfiler openvpn operator oracle osmc p palworld pam parisa partimag paul paulo payroll pei Pesar peter phuonganh pi picorv pk plexuser PLMIMService polkadot postgres prime primenet proj proxyuser prueba psa psy pzserver pzuser qa qadeer qsecofr qsrvbas qwe123 rajesh ram rc readarr readonly remoto rinet riscv rita rizki robinson root1 router rr rui sa sabir sadmin saeed sagar sakib sakurai sales samba samina sammy santosh se secure security send sendmail sergey serv server sftp sftpuser1 shanti share shoaib shreya shutdown siamak sigit silas simon siva sk sl slab smith socksuser sol solana solr sonar sonos sonu speedtest sqldba squid ss ssh status steam storage student sudo sugon superadmin superman superuser supervisor support support1 suzana swerv swj syp SYS sysadmin system sysuser t t1 tablet taller tamara tanglv tanulo tarun tayyaba team06 teamcity tech telecomadmin telegram telegramapi telnet temp ten TEST test test002 test1 test2 tester testi test_user testuser tet thang this thomas tianhao tibero timur tmp tms tomcat tomcat6 trade-bot trade.bot tradebot trouble ts3server turtle tushar tzjiang ubnt ubuntu ucerd-hpc uftp unidade unifi upload uploader uroosa usario user user002 user1 user100 user11 user123 user3 user8 userftp username utente vagrant valera vali validate validator vamshi var vasil ventas05 victor vikash violet vishnu VM vncuser vod vor vpn vps vr vyos wadmin walle wanghy wasadmin wayne web web3 webadmin webapp weblogic webmin webshield wireguard won work worker wwUser www wxx xray xsj yamaguchi yang yann yogesh yoo zabbix zahar zehuac zhang zhangke zhangqin zhangsan zhangyi zhaopeng zhaoyi zhou zk zll znc zomboid zx zxl zyf zz