freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Saturday May 3, 2025 denied by configuration: 2.57.122.57: 26 Times 8.222.181.172: 1 Time 14.103.108.225: 13 Times 14.103.117.173: 3 Times 14.103.127.234: 5 Times 14.103.161.171: 9 Times 14.103.170.139: 4 Times 24.9.141.31 (c-24-9-141-31.hsd1.co.comcast.net): 2 Times 24.108.102.132 (S01063c2d9ee02c1e.gv.shawcable.net): 17 Times 27.155.77.43: 14 Times 34.122.106.61 (61.106.122.34.bc.googleusercontent.com): 8 Times 44.220.185.153 (ec2-44-220-185-153.compute-1.amazonaws.com): 1 Time 45.6.188.43: 17 Times 45.7.171.18: 16 Times 45.182.206.85 (45-182-206-85.carandainet.com.br): 17 Times 47.237.17.76: 1 Time 49.64.242.249: 7 Times 49.247.160.184: 13 Times 57.129.61.16 (vps-75e7caae.vps.ovh.net): 16 Times 59.174.146.169: 6 Times 60.50.205.211 (211.205.50.60.cbj04-home.tm.net.my): 9 Times 61.76.112.4: 11 Times 64.62.156.208 (scan-88-6.shadowserver.org): 1 Time 79.106.102.70 (ns4.onealbania.net): 14 Times 80.94.95.15: 1 Time 80.94.95.29: 1 Time 80.94.95.112: 12 Times 80.94.95.115: 7 Times 80.94.95.116: 6 Times 80.94.95.125: 8 Times 80.94.95.241: 5 Times 83.222.191.218: 1 Time 88.214.48.16: 13 Times 88.214.48.17: 25 Times 88.214.48.18: 30 Times 88.214.50.23: 4 Times 88.214.50.24: 3 Times 91.196.35.126: 16 Times 92.118.39.68: 36 Times 92.255.57.132: 17 Times 101.36.107.171: 17 Times 101.91.117.83: 8 Times 103.13.206.28 (ip103-13-206-28.cloudhost.web.id): 11 Times 103.13.206.31 (ip103-13-206-31.cloudhost.web.id): 14 Times 103.81.86.208: 2 Times 103.180.177.170: 15 Times 103.213.104.14: 15 Times 103.233.206.154: 16 Times 104.168.35.231 (104-168-35-231-host.colocrossing.com): 14 Times 106.12.153.108: 4 Times 106.51.1.63 (106.51.1.63.actcorp.in): 15 Times 116.55.245.26: 11 Times 117.50.184.148: 8 Times 117.50.198.67 (xapdecg.cn): 1 Time 118.26.39.187: 11 Times 118.122.93.139: 10 Times 120.48.98.125: 4 Times 122.96.151.110: 25 Times 124.223.108.129: 9 Times 138.2.102.244: 1 Time 139.19.117.129 (inet-research-scan-5.mpi-inf.mpg.de): 21 Times 152.32.206.160: 10 Times 158.174.211.17 (h-158-174-211-17.NA.cust.bahnhof.se): 15 Times 159.253.36.221: 11 Times 162.214.206.114 (dedi-432065.grupocaneva.com): 11 Times 165.154.105.128: 14 Times 170.64.198.192: 1 Time 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time 175.27.168.51: 12 Times 176.235.231.48: 13 Times 180.101.143.248: 11 Times 185.255.91.221 (static.221.91.255.185.clients.irandns.com): 12 Times 187.45.100.0: 15 Times 189.69.115.24 (189-69-115-24.dsl.telesp.net.br): 2 Times 190.129.122.86: 12 Times 193.24.211.22: 1 Time 193.32.162.135: 1 Time 193.32.162.136: 2 Times 193.176.23.6: 24 Times 193.176.23.7: 24 Times 195.178.110.50: 5 Times 196.251.88.103: 1 Time 198.12.107.228 (nowacobeef-h50.mailspamsafe.com): 13 Times 202.165.24.40: 2 Times 203.150.107.244 (244.107.150.203.sta.inet.co.th): 16 Times 216.155.93.75: 11 Times 218.212.11.233 (233.11.212.218.starhub.net.sg): 13 Times 220.81.148.101: 2 Times 220.118.173.234: 17 Times 223.130.11.165: 3 Times system login attempted: sshd : 2 Times games : 1 Time nobody : 1 Time root : 926 Times sync : 1 Time www-data : 1 Time received disconnect: [preauth] : 261 Times Bye Bye [preauth] : 990 Times Bye [preauth] : 35 Times Client disconnecting normally [preauth] : 1 Time error: Protocol major versions differ: 2 vs. 1 : 2 Times error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 2 Times error: kex_exchange_identification: client sent invalid protocol identifier "GET /Mya5 HTTP/1.1" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "{"id": 1, "jsonrpc": "2.0", "method": "login", "params": {"login": "kubernetes", "pass": "x", "agent": "XMRig-Linux/6.18.0 (2C/4T x86_64) gcc/12.2.1", "algo": ["cn/1", "cn/2", "cn/r", "cn/fast", "cn/half", "cn/xao", "cn/rto", "cn/rwz", "cn/zls", "cn/doubl" : 1 Time error: kex_exchange_identification: read: Connection reset by peer : 15 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times error: send_error: write: Connection reset by peer : 1 Time dictionary attacks: 410 unique usernames. - < | 1234 abc abdullah ada adfexc adm ADMIN admin Admin1 admin1 admin1234 Administrator administrator agile alex ander ang ansadmin ansible apolo ara ardi arkserver azureuser BACKUP backuper barani barbara bhanu bigdata bittensor bkd bnb bob book boss bryan btc carlos chris christian Cisco cisco client core csgoserver cy darwin db2inst1 dbadmin debbie debian default delme demo denis deploy deployer derick dev developer devops devuser dima director dmdba dms doge dokku dom dot dreamnine dspace dss duchen eagle eas eddy emilia en engineer eren es esadmin estest esuser eth etherpad exchange exploit f fabrice factory fahim fang fengkai fernando filecoin firedancer flash flectra flink foundry frappe freshlogs ftp ftpuser git gitlab gitlab-runner gptftp Guest guest hadi hari hassan hello helpdesk hr htech hyc hyperchain ian igor info install installer instrument integral iran ircd irina isp itsnc ivan jack jamal java javier jay jeffrey jenkins jessica jgarcia jiachen jinyu Jirka jirka jonas jonathan jose julius jupyter justin K kafka kai kamal kareem key khatoon laura lbx lear legion len lender library lim ljh loan login lotus lucas ludmila macuser mahesh mahima mailman manage manoj markh master mc mega mehedi michael michal minecraft misha mohammad mohsen monitor moth3r mother mpovic msf msfadmin mts myftp mysftp mysql myuser n0cdaemon nada named natasha nc nessus netscape neutron new1 newsletter newuser nexus nfs nfsnobod nick nicole nik niklas noc node node1 (none) NSA nsroot nuucp nw obi ociisstd ODM odoo odoo17 oem office ogsuser onlime_r opc openhabian operator ops oracle orange osboxes patrice patrol peter pgsql pi piso plex PLMIMService podcast portal postgres pradeep primenet pritchard proba production pruebas pujie pw qsrvbas qwe rabbitmq radarr rahim rbs report rinet rk robert roch router RPM rtc ruby rustserver sachin saeed sajjad salman sandra sbserver scanner scsadmin sd se sean seekcy sejin sergey sergio server setpriv sftp sftp_user share shiyi shutdown shy siesa sinusbot smith sol solana solaris solutec solv sonos sravani stafford steffen steve student student02 student1 student7 su sumit sunil superman supervisor support suzana SYS sysadmin system t6 tab taibabi tamayo team4 tecnico temp tes TEST test test4 test5 test7 testssh testuser testy tmp tnd tom tommy tony toshiba trias ts ts3server tsbot u1 ubnt ubuntu upload usdc usdt User user user07 user1 user2 user3 user4 USERID username usuario1 valheim validator ventas visitor vncuser vpn wang wanglei wasadmin wc web weblogic weiqing wing wist wjx wolf wow wt wwUser www wxl wxr xrp xy yamaguchi yas Z zch zhangc zhaozhr zs zt zx zym