freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Thursday May 1, 2025 denied by configuration: 2.59.152.72: 14 Times 2.59.152.129: 4 Times 14.63.196.175: 5 Times 14.103.25.86: 3 Times 14.103.34.252: 10 Times 14.103.83.66: 7 Times 14.103.113.170: 7 Times 14.103.123.75: 6 Times 14.103.139.79: 12 Times 14.116.217.124: 7 Times 20.214.201.111: 15 Times 36.110.172.218: 1 Time 38.191.248.4: 2 Times 38.207.132.176: 3 Times 45.6.188.43: 6 Times 45.130.145.105: 24 Times 45.130.145.106: 17 Times 45.148.10.67: 12 Times 45.158.59.52: 15 Times 46.101.206.183: 10 Times 59.31.133.238: 2 Times 59.144.238.11: 10 Times 62.3.42.103 (static.103.42.3.62.clients.irandns.com): 16 Times 65.49.1.39 (scan-54b.shadowserver.org): 1 Time 74.48.124.57 (mail.speedynode.com): 16 Times 77.28.15.109: 1 Time 80.94.95.15: 2 Times 80.94.95.29: 5 Times 80.94.95.112: 4 Times 80.94.95.115: 16 Times 80.94.95.116: 20 Times 80.94.95.125: 7 Times 81.192.46.36 (adsl-36-46-192-81.adsl.iam.net.ma): 14 Times 82.199.197.245 (host-245.197.199.82.ucom.am): 4 Times 88.214.48.16: 14 Times 88.214.48.17: 28 Times 88.214.48.18: 25 Times 91.228.127.246: 13 Times 92.118.39.61: 30 Times 93.176.2.87 (ftthcc.93-176-2-87.sfrcaraibe.fr): 14 Times 101.36.113.80: 15 Times 102.210.80.6: 14 Times 103.13.206.142 (shiina.weblify.biz.id): 12 Times 103.112.131.69: 13 Times 103.149.114.17: 14 Times 103.193.177.66 (ip103-193-177-66.cloudhost.web.id): 10 Times 103.197.184.12: 5 Times 103.197.184.162: 5 Times 106.12.153.108: 4 Times 107.175.33.240 (107-175-33-240-host.colocrossing.com): 14 Times 108.85.73.157 (108-85-73-157.lightspeed.wlfrct.sbcglobal.net): 15 Times 116.1.149.196: 12 Times 116.105.213.52: 5 Times 116.105.223.195: 5 Times 116.110.11.146: 4 Times 116.110.76.4: 5 Times 116.110.211.6: 4 Times 117.50.174.24 (xtqtxad.cn): 3 Times 117.50.188.36: 1 Time 120.48.0.41: 1 Time 120.48.98.125: 4 Times 121.204.171.142: 5 Times 122.96.151.110: 18 Times 122.115.225.109: 4 Times 125.124.183.254: 1 Time 134.122.121.56: 13 Times 134.199.155.207: 1 Time 140.106.25.217 (140-106-25-217.resi.cgocable.ca): 13 Times 140.246.92.156: 2 Times 143.110.150.27: 15 Times 146.59.95.254 (vps-c4881b1d.vps.ovh.net): 14 Times 147.182.194.88: 11 Times 154.221.28.214: 9 Times 160.19.79.72: 5 Times 160.191.52.84: 5 Times 162.240.103.112 (162-240-103-112.unifiedlayer.com): 15 Times 167.172.178.1: 7 Times 171.244.40.20: 16 Times 172.105.102.42 (dev3.academyforinternetresearch.org): 1 Time 175.126.82.20: 8 Times 180.76.96.64: 7 Times 181.49.8.57: 13 Times 181.171.129.4 (4-129-171-181.fibertel.com.ar): 13 Times 185.213.164.15 (static.15.164.213.185.clients.irandns.com): 9 Times 185.228.135.173: 14 Times 186.96.145.241 (fixed-186-96-145-241.totalplay.net): 3 Times 188.121.99.48: 17 Times 188.138.28.121 (euvds5035x26.startdedicated.de): 15 Times 193.24.211.22: 1 Time 193.32.162.135: 28 Times 193.32.162.137: 33 Times 193.176.23.6: 26 Times 193.176.23.7: 26 Times 194.0.234.16: 8 Times 194.0.234.19: 22 Times 196.251.66.3: 5 Times 196.251.67.42: 4 Times 196.251.83.136 (undefined.hostname.localhost): 5 Times 196.251.85.62: 15 Times 196.251.87.35: 5 Times 196.251.88.103: 2 Times 197.5.145.102: 16 Times 200.225.246.102 (200-225-246-102.dynamic.idial.com.br): 11 Times 202.29.231.164: 15 Times 202.165.14.190: 12 Times 211.48.247.69: 2 Times 216.155.93.75: 14 Times 218.78.32.160: 8 Times system login attempted: mail : 2 Times root : 880 Times uucp : 1 Time www-data : 1 Time received disconnect: [preauth] : 226 Times Bye Bye [preauth] : 1088 Times Bye [preauth] : 23 Times Client disconnecting normally [preauth] : 1 Time Disconnected from invalid user 80.94.95.125 port 43964 [preauth] : 1 Time error: Bad remote protocol version identification: 'SSH-2.0_CoreLab-1.0' : 1 Time error: Protocol major versions differ: 2 vs. 1 : 3 Times error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 2 Times error: kex_exchange_identification: read: Connection reset by peer : 21 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times dictionary attacks: 534 unique usernames. 1234 123456 1502 aanantha aaPower ab abhi aboediha acme aconnors ada adm ADMIN Admin admin admin1 Administrator administrator aeiger ahalim ahmed ahuma alex alexc92 alias alma amir ander andrew ang angus ansadmin anton app apple appuser arad artem arthur barani bigdata bitcoin bitrix blue bnb boss bot bryan btc btc1 bwadmin cape castle centos certbot ceshi cgadmin chris chromeuser Cisco cisco cloud cod2server config contract crafty crypto CSG csserver cstrike ct cuckoo daniel dante daphne dasusr1 data dave dayz db db2inst1 dbadmin debian debianuser default degen delegate delme Demo demo demo1 deploy deployer dev developer devin devops devuser dheeraj diana diego dima django dm docker doge dogecoin dolphinscheduler dom dot dreamnine dspace duncan edge edx elastic elasticsearch elena elias elk elsearch emcali emeline engineer erp es esuser eth ether ethereum ethereumdocker fabio fabrice farid filecoin flash flask flavia formation foundry frappe freshlogs ftp ftp1 ftproot ftptest ftpuser ftpuser1 ftpuser2 ganesh geneva george ghost git git2 gitlab gittest gmodserver gns3 gpadmin gptftp gray gsy Guest guest guest1 guest123 gwei hadoop hafiz halo hanna hansen hanyijia haoran haotian happy hari hc hcc helen help host hscroot hua hyperchain iman info informix ingres installer instrument integra intell internal ionguest iot irina isp jack java jayesh jhlee Jirka joggler joro jose josh joy jumpserver k8s kai kampret karin kf2server khoa kkk km kodi kt kyivstar larry laser lc lear leonel lhy liang liferay lighthouse lining liran liwei lll localadmin loginuser long lotus lpadmin ltc lujun magento mahsa main mamad maman management manju mapr marcus marjan markus master mati maya mckenzie mcserver mega mgts miao michael milad minecraft mirjam mmm mohamad mohammad mohit mojtaba mongo monitor mori mother mp msf my mysql myuser nadya nana netlink newuser newuser1 nginx nic nicole nikhil nmt node nokia (none) npm nrk NSA nvidia oasis observer oceanbase odin odoo oe office oldmc olt one oneadmin onlime_r OO opc openwrt operator opsadmin oracle orbetello osboxes oscar osmc ospite others panfeng parsa paul paula payroll pc peak pearl pgsql pi pippo piso plexserver PLMIMService podcast police polkadot postgres proxyuser public pujie pwrchute pzk qsrvbas qw raj ram ranger recruit reelforge reelftptv renovrisk report riccardo rinet rise risk robot root2 rootuser rstudio rtc runner ruslan sa saiful sales sam sammyfiles sandro saurabh scan1 scott sebastien sergey server seth setup seyoung sfserver sftp shahab shahriar shared shiyi snort software sol solana solutec sonar sonarr song sql squadserver squid staff status steam steam2 steffen stream student student2 subhash suha suhail sunny super superadmin supermaint superuser supervisor support support1 supports surya svnuser swapnil sybase SYS system systems t3rr0r taibabi taller tao tarun tb teamspeak tech telecomadmin telegram telegramapi telekom telnet temp terraria TEST test test_1 test1 test2 test3 test8 tester testing test-user test_user testuser testuser01 timothee titus tkadmin tmp tom tomcat tommy tools toor trade-bot trade.bot tradebot trouble trx ts3 tttt tu tunnel uadmin ubnt ubuntu ubuntu2 uftp unreal usario usdc usdt user user001 user1 user12 user2 user4 user40 user5 Username username usuario utente uzivatel vagrant validate validator vbox venkata vhserver visit vivek vivi vnc vpn vv waleed wang wangjia wangpeng warehouse web3 webshield webtest wenwu wizard wms worker wqmarlduiqkmgs wwUser www wy xian xiaoli xiong xrp xt yunpeng zabbix zhangqin zhangyun zhaoxj zhihong zhongwen zhoubin zimo zqq zzl