freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Friday May 9, 2025 denied by configuration: 8.219.236.45: 8 Times 14.53.62.134: 2 Times 14.103.111.127: 10 Times 14.103.112.116: 24 Times 14.103.113.170: 6 Times 14.103.114.20: 2 Times 14.103.117.143: 1 Time 14.103.118.208: 3 Times 14.103.140.196: 2 Times 14.103.165.70: 6 Times 14.103.245.177: 7 Times 14.225.206.98: 12 Times 27.111.32.174: 10 Times 27.112.79.10 (ip27-112-79-10.cloudhost.web.id): 14 Times 35.216.174.155 (155.174.216.35.bc.googleusercontent.com): 1 Time 43.245.249.250: 7 Times 46.101.58.67 (bytabank.se): 15 Times 58.150.46.21: 18 Times 59.12.160.91: 4 Times 60.21.134.178: 1 Time 64.62.197.207 (scan-50k.shadowserver.org): 1 Time 64.227.136.203: 20 Times 65.49.1.158 (scan-71-06.shadowserver.org): 1 Time 79.3.96.178 (host-79-3-96-178.business.telecomitalia.it): 2 Times 79.32.27.198 (host-79-32-27-198.retail.telecomitalia.it): 21 Times 80.94.95.15: 7 Times 80.94.95.112: 51 Times 80.94.95.125: 39 Times 80.94.95.241: 8 Times 87.251.102.94 (h087251102094.static.pool.rt.sakhalin.ru): 11 Times 91.92.211.204: 6 Times 92.118.39.57: 5 Times 92.118.39.61: 24 Times 92.118.39.68: 33 Times 93.113.63.124: 10 Times 102.210.80.6: 14 Times 103.23.199.38 (ip103-23-199-38.cloudhost.web.id): 20 Times 103.67.79.165 (ip103-67-79-165.cloudhost.web.id): 8 Times 103.89.240.184: 9 Times 103.89.240.187: 1 Time 103.117.56.152 (srv.foto.web.id): 14 Times 103.134.154.72 (ip72.154.134.103.in-addr.arpa.unknwn.cloudhost.asia): 13 Times 103.155.86.212: 5 Times 103.165.218.190 (190.218.165.103.net.iforte.net.id): 24 Times 103.252.88.99 (provided-by-visuhost.com): 10 Times 104.28.254.47: 11 Times 106.12.153.108: 4 Times 107.172.211.173 (107-172-211-173-host.colocrossing.com): 14 Times 113.137.34.110: 12 Times 116.73.240.74: 14 Times 116.105.220.1: 5 Times 116.105.220.83: 4 Times 116.110.77.76: 5 Times 116.110.114.181: 3 Times 116.110.119.92: 4 Times 116.193.191.90 (ip116-193-191-90.cloudhost.web.id): 14 Times 118.69.174.86: 12 Times 118.193.43.244: 12 Times 120.48.98.125: 1 Time 122.96.151.110: 24 Times 128.199.183.223: 14 Times 134.17.16.19 (19-16-17-134-cloud.mts.by): 2 Times 139.162.151.216 (139-162-151-216.ip.linodeusercontent.com): 5 Times 142.93.180.106: 12 Times 144.48.241.92: 16 Times 154.221.29.120: 12 Times 161.35.223.68: 6 Times 162.240.228.209 (vps-1623617.slierp.co): 1 Time 164.92.135.45: 13 Times 165.232.188.94: 12 Times 167.172.111.28: 10 Times 171.251.19.250 (dynamic-ip-adsl.viettel.vn): 4 Times 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time 176.65.148.10 (hosted-by.pfcloud.io): 1 Time 176.196.236.146: 21 Times 181.49.178.6: 12 Times 182.44.79.69: 8 Times 185.93.89.118: 5 Times 185.116.63.229 (ge401-0-0-33.er01.lil01.jaguar-network.net): 1 Time 185.141.132.26: 22 Times 185.213.175.190: 13 Times 186.117.149.128: 21 Times 189.7.17.61 (bd07113d.virtua.com.br): 3 Times 189.8.108.39 (39.108.8.189.redel.com.br): 29 Times 192.241.136.82: 8 Times 193.32.162.84: 15 Times 193.32.162.135: 18 Times 193.32.162.136: 2 Times 193.123.114.34: 5 Times 196.188.187.250: 25 Times 198.46.146.158 (198-46-146-158-host.colocrossing.com): 13 Times 202.39.251.216 (202-39-251-216.hinet-ip.hinet.net): 13 Times 209.38.233.74: 6 Times 216.172.190.206 (col.colettelounge.com): 14 Times 219.92.95.24 (sgb-95-24.tm.net.my): 6 Times system login attempted: games : 1 Time root : 704 Times received disconnect: [preauth] : 214 Times Bye Bye [preauth] : 1119 Times Bye [preauth] : 138 Times Disconnected from invalid user 80.94.95.125 port 24711 [preauth] : 1 Time Disconnected from invalid user 80.94.95.125 port 36826 [preauth] : 1 Time Disconnected from invalid user 80.94.95.15 port 20434 [preauth] : 1 Time error: Protocol major versions differ: 2 vs. 1 : 2 Times error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 5 Times error: kex_exchange_identification: read: Connection reset by peer : 155 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times dictionary attacks: 508 unique usernames. # 1234 123456 3 a aa aaron abbott abc abhinav ace ada adempiere adi admin admin1 admin1234 admin2 administrator administrator1 afc agile ahmad airflow alan alex amanda andrey anti aovalle arif arnaldo asta asterisk autcom azureuser babak back basic bbx bee bitrix bittensor bjf bless bnb book bot btc bwadmin c caja1 caja2 ccorrea cdl cdp cdr celery centos chenhui chris cindy citest cloudftp clover common comp config connor consulta1 corentin crap crew csserver cstrike cx cyrus d2 dadbeh dambrosio damian damien dan data datacom daveo david db2 dee default del delegate dell demo deploy depot dev develop developer devil devops devuser dexter diana dias didi dino dls docker doge dogecoin dot dovecot dummy edubook elasticsearch elemental elena erfan es esuser eth ether ethereum ethereumdocker etluser eureka filecoin fileserver fly frappe freshlogs frontend ftp ftpadmin ftpadmin1 ftpmedia ftptest ftptest1 ftpuser gbase gbasedbt gemini ghost gilbert git gitadmin github gnmwu gns3 gpu gr graficogm graphsql gt guest gwei gx hadoop hamid hamza hannes hardy harrison hduser helloworld hemant hendra hero hesam hjh hl hostinger hpcadmin hsung hunter hussain hyc ict id image import info infra ins installer iot J jack janusz jarservice jboss jc jeff jeus jiaqi jinyu jkkim john jorge jvj k kamil karim karthick kav kbe kevin kian kira kodi komodo kw laravel larry lawrence lcx ldap lekaren lien lighthouse lihao lili liujie lixing liyan ll loginuser loki lotus lsj luciano ludmila macuser mahsa mahyarta maksym malik mani manu manuel mapadmin marcelo marco marcus marketing martin mauer mc md media medical mehdi mikhail milan mine ming mj mob mohammad mongod monitor mostafa mpi msf mw mysql myth nabi nadia nagaraj naim nakano ndd neo4j newuser ngdc nikola njzf node node1 (none) nps odoo odoo13 oem omm oneadmin openstack oper operador oracle ossuser palworld panorama papio patrol pc pendulum peter pi pivpn plesk plexuser polkadot pool postgre postgres postmaster prashant pritchard prometheus proxyuser prueba pruebas public q qa qwe r00t rabbitmq radius radu rami rashid red renyun repo rescue respaldo riad riccardo rke royal rr1 rsync rtorrent ryan sachin sae saeed saga sai sakurai sampsa samurai sandra sans sansforensics sasha saturn scheduler sconsole scsadmin sdtd sean secret sergey server service sftptest sftpuser sham share shenxiaofeng shree simon sincroniza sinh sinha site siteadmin slurm smart smith smr sns sol solana sophia sora special splunk spt squid sri srojas srv ssh sshtest ssl stackato steam steam1 stefanos student sun sunrise super superadmin support supports svnadmin svxlink sysadmin system taiko tanta tata teamspeak tech techuser tecnico telecomadmin telegramapi telnet temp tes test test03 test2 test3 test5 test9 teste teste1 testftp testtesttest testuser teszt tigergraph timur tip tmpuser ton trade-bot trade.bot tradebot ts3 tx u2 ubnt ubuntu uftp uno85c upload usdc usdt user user_01 user1 user4 username usuario usuario1 usuario2 validate validator vbox vcloud vcsa vhpadmin victor video viewer vijay vin vlado vmail vyatta walter wang wangying wangyl was web3 webdev website wifi wikijs winter wjx wpuser wqmarlduiqkmgs ws wyh wyk xander xh xiaobin xray xrp xw yasin yi ying yogi youssef yyy Z zdy zeeshan zhangjunyin zhangyh zhangyx zone zty zzl