freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Sunday May 4, 2025 denied by configuration: 2.59.152.54: 3 Times 14.29.198.130: 2 Times 14.103.112.100: 9 Times 14.103.115.106: 6 Times 14.103.120.70: 5 Times 14.103.140.196: 2 Times 24.108.102.132 (S01063c2d9ee02c1e.gv.shawcable.net): 3 Times 34.100.168.179 (179.168.100.34.bc.googleusercontent.com): 14 Times 36.69.145.252: 10 Times 39.109.126.152: 4 Times 45.6.188.43: 17 Times 45.88.138.213: 5 Times 45.116.77.59: 5 Times 45.148.10.240: 38 Times 45.175.157.53: 3 Times 51.77.245.237 (vps-fbb57fdf.vps.ovh.net): 13 Times 59.12.160.91: 4 Times 68.34.48.40 (c-68-34-48-40.hsd1.mi.comcast.net): 15 Times 80.94.95.29: 7 Times 80.94.95.112: 23 Times 80.94.95.125: 16 Times 80.94.95.241: 21 Times 81.71.37.141: 9 Times 81.133.106.57 (host81-133-106-57.in-addr.btopenworld.com): 4 Times 82.140.0.119: 1 Time 82.207.8.154 (154-8-207-82.pool.ukrtel.net): 11 Times 83.222.191.218: 1 Time 87.251.77.103: 13 Times 88.214.48.16: 2 Times 88.214.48.17: 4 Times 88.214.48.18: 5 Times 88.214.50.36: 3 Times 88.214.50.37: 3 Times 88.214.50.38: 3 Times 88.214.50.39: 3 Times 88.214.50.40: 3 Times 91.122.31.252: 14 Times 92.222.141.85 (linuxcute.com): 10 Times 92.255.57.132: 7 Times 94.254.0.234 (h-94-254-0-234.na.cust.bahnhof.se): 12 Times 96.67.59.65: 11 Times 101.100.220.34 (v22351305.sin01.serveradd.com): 15 Times 101.227.203.162: 9 Times 103.81.86.208: 11 Times 103.139.193.176 (ip103-139-193-176.cloudhost.web.id): 16 Times 103.171.91.10: 13 Times 103.213.104.14: 5 Times 103.215.80.141: 14 Times 106.12.153.108: 3 Times 111.67.199.209: 3 Times 113.130.70.209: 1 Time 114.96.71.66: 1 Time 116.118.49.238: 12 Times 116.253.213.64: 7 Times 117.2.49.125 (dynamic-adsl.viettel.vn): 8 Times 117.33.249.211: 14 Times 120.48.98.125: 4 Times 122.96.151.110: 20 Times 128.199.33.46: 3 Times 128.251.119.173: 3 Times 129.204.131.109: 4 Times 134.199.173.12: 1 Time 134.209.119.98: 13 Times 134.209.152.88: 1 Time 137.184.202.107 (nauru.production): 14 Times 139.19.117.129 (inet-research-scan-5.mpi-inf.mpg.de): 20 Times 142.93.118.48: 1 Time 147.45.49.37 (24262.ip-ptr.tech): 4 Times 152.32.206.160: 4 Times 154.221.27.234: 10 Times 160.187.246.13: 10 Times 162.19.246.228 (vps-fe7e5cf7.vps.ovh.net): 14 Times 167.172.69.229: 18 Times 167.172.188.213: 19 Times 168.167.228.123: 14 Times 170.64.237.203: 9 Times 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time 175.211.69.197: 2 Times 177.39.124.221: 12 Times 182.43.19.14: 3 Times 185.213.165.126 (static.126.165.213.185.clients.irandns.com): 14 Times 186.233.208.13: 15 Times 187.170.74.95 (dsl-187-170-74-95-dyn.prod-infinitum.com.mx): 18 Times 187.235.113.149 (dsl-187-235-113-149-dyn.prod-infinitum.com.mx): 9 Times 189.126.4.42 (42-189-126-4.gabandalarga.com.br): 2 Times 190.12.102.58 (static.58.102.12.190.cps.com.ar): 12 Times 193.32.162.97: 35 Times 193.95.30.37: 11 Times 193.176.23.6: 5 Times 193.176.23.7: 4 Times 195.133.65.204: 10 Times 195.178.110.50: 5 Times 195.178.191.5 (h-195-178-191-5.NA.cust.bahnhof.se): 14 Times 196.189.87.177 (aii.et): 11 Times 197.153.57.103: 4 Times 202.157.176.210 (mail.magis.id): 14 Times 202.165.17.196: 12 Times 203.125.118.248 (mailbox1.solutiondetails.com.sg): 12 Times 210.79.138.21: 12 Times 210.114.22.126: 10 Times 211.54.249.57: 2 Times 217.154.6.187 (ip217-154-6-187.pbiaas.com): 2 Times 221.159.150.85: 13 Times system login attempted: sshd : 1 Time root : 928 Times www-data : 1 Time received disconnect: [preauth] : 261 Times Bye Bye [preauth] : 1043 Times Bye [preauth] : 78 Times Normal Shutdown, Thank you for playing [preauth] : 5 Times Disconnected from invalid user 80.94.95.125 port 43593 [preauth] : 1 Time error: Protocol major versions differ: 2 vs. 1 : 3 Times error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times error: kex_exchange_identification: read: Connection reset by peer : 11 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times dictionary attacks: 462 unique usernames. ~ 0 1 1234 a aaaa aaaaaa abc adam ade adfexc Admin admin admin1 administrator adrian adriana agent ahmad ahsan aiya alan alex ali alumni alumno anoosha ansible apache appuser asad asif atest backend bdp bharat bot botuser brett cap cash celery centos chensikai christian chromeuser cisco clamav clement composer confluence1 connect control crm cssserver ctf cuc dabin danny dara Data data db2 db2fenc1 debian dell delphi demo deploy design dev devadmin developer devops devuser dima ding dingtalk diogo dmp docker docs ds dspace dz ecs ee17041 elasticsearch elixir elk emil erik erp erpnext exam ezi factory fanslau farhan fb fcx fengyingchao fernando firewall flk Flower freshlogs frontend fsx ftp ftp_user ftpuser ftpuser2 G gb gerrit ghost git gitlab gorka gpadmin gpu gpu02 greatwall greg guest guest1 hadi hadoop hadoopuser haha hajar hanul hcm hhong hieu hik hong honghee hoster hrx http IEUser iexcel_wuhan images imj intel ischoi islam ja jacob james jangkyu japan javad jax jayesh jenkins jepark jerri jim jito jj jjw john jose julio jwpark k8s kafka kale kangzhen kareem katie kav kevin ki kipt kk ksy larry lcy lee lena leonard leos lierda like lim linux litiantian liu liuyan liwp liyanjun liyi ljh loginuser loose lqh ltsp112 lukman lwy lx lxq lxw lyc lyh lyl lyq lyt magento mahmoud maicon maks mama manish mapr maria martin master mastodon matej mathis maurice max mayank media mega meihui meklis mike minecraft miner2 mm mmd mohammad Mohammed monaco monitor mormegil mostafa mp mpovic mssql myftp mysql myzhang mz n namuel nathan ndlabs newuser nfvdg nginx1 nick NL5xUDpV2xRa (none) normaluser ns ns2 nsroot ODM odoo odoo13 office ogpbot olga omnisky oms oneadmin opc operator oracle orange os osama patrol pb pbsdata pdfuser perforce pi pika piso plane pooja popo postgres potok precio01 prod publico pure qadmin qinyue qtss qyy rahel rami ramin rbs receive recover redbot redhat retag reza rfro rishabh rohan rohit root2 sadmin saeed said sajjad samba sameer sammy sandeep sandro sanjeev sara sarah sasha sbserver scan scott se secure server service seth sftpuser sg shenxiaofeng shiny shred shredstream shs sinha site3010 sol solana solana-validator solomon sonar sp sql squid steam student1 sumit sun superman suporte support sven taha taibabi tao tby teacher teamtalk technik telecomadmin telekom telnet temp temporary Test test test2 test4 tester testing testing1 testuser thai thi tiptop tom toor ts3 ts3server tung tutor ubnt ubuntu uftp ul umut upload User user user1 user2 user3 user9 userfax username userroot usertest validator vega vikas vision vncuser vpn vuser vyatta vyos W walter wangyp wangyutian wartung wcs wcy wd web webadmin webapp webmaster wedding wh wildfly wilson wj wolf wow wq wu wwUser wxy wzm x xfusion xiaoziyang xing xjg xl yan yangboyi yanghm yanhao yhchen yos ysz yu yuanenming yuheng yzy zabbix zhangsan zhao zhoubin zihan zookeeper zy