freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Saturday May 10, 2025 denied by configuration: 14.103.93.175: 1 Time 14.103.113.170: 4 Times 14.103.114.20: 7 Times 14.103.114.218: 7 Times 14.103.115.213: 1 Time 14.103.117.69: 21 Times 14.103.142.227: 8 Times 14.103.152.56: 4 Times 14.103.161.186: 10 Times 14.103.170.152: 13 Times 14.103.170.153: 10 Times 20.127.55.146: 9 Times 43.245.249.250: 7 Times 45.70.100.116 (45-70-100-116.alphanet.psi.br): 4 Times 45.130.148.216: 14 Times 45.134.26.79: 17 Times 45.135.232.92: 15 Times 45.135.232.177: 17 Times 45.140.17.124: 5 Times 45.172.152.74: 8 Times 46.188.119.26 (broadband-46-188-119-26.2com.net): 13 Times 47.103.36.53: 1 Time 47.236.255.243: 11 Times 49.0.129.17: 8 Times 51.38.71.0 (vps-fc85e1e4.vps.ovh.net): 13 Times 51.75.124.228 (vps-edcbbc9b.vps.ovh.net): 14 Times 51.89.166.236 (vps-5f0ef624.vps.ovh.net): 4 Times 51.195.149.120 (vps-a9a73efc.vps.ovh.net): 6 Times 52.250.16.220: 12 Times 54.37.10.124 (vps-1e3810b9.vps.ovh.net): 12 Times 60.174.72.198: 17 Times 60.243.50.104 (50.243.60.104.hathway.com): 9 Times 61.12.84.15 (static-15.84.12.61-tataidc.co.in): 12 Times 61.188.205.76 (76.205.188.61.broad.nj.sc.dynamic.163data.com.cn): 1 Time 62.3.42.23 (static.23.42.3.62.clients.irandns.com): 7 Times 62.234.4.59: 4 Times 65.49.1.123 (scan-68-01.shadowserver.org): 1 Time 67.140.237.66 (h66.237.140.67.dynamic.ip.windstream.net): 2 Times 80.94.95.15: 4 Times 80.94.95.112: 36 Times 80.94.95.125: 49 Times 82.115.19.192: 24 Times 82.207.8.194 (194-8-207-82.pool.ukrtel.net): 14 Times 84.51.43.58 (host-84-51-43-58.teletektelekom.com): 4 Times 85.133.201.104: 5 Times 91.92.211.204: 6 Times 91.239.19.66 (pppoe-91-239-19.66.evolife.su): 10 Times 92.118.39.57: 5 Times 92.118.39.61: 4 Times 92.118.39.97: 27 Times 96.92.63.243 (96-92-63-243-static.hfc.comcastbusiness.net): 12 Times 101.47.5.97: 13 Times 103.13.206.252 (ip103-13-206-252.cloudhost.web.id): 13 Times 103.63.25.12 (ip103-63-25-12.cloudhost.web.id): 12 Times 103.119.92.117: 10 Times 103.136.200.240: 29 Times 103.143.72.165: 10 Times 103.148.100.146: 10 Times 103.164.35.165: 3 Times 103.172.204.152 (ip103-172-204-152.cloudhost.web.id): 11 Times 103.174.114.24 (ip103-174-114-24.cloudhost.web.id): 5 Times 103.218.122.73: 11 Times 106.12.153.108: 3 Times 107.175.197.29 (107-175-197-29-host.colocrossing.com): 11 Times 108.16.40.43 (pool-108-16-40-43.phlapa.fios.verizon.net): 2 Times 112.220.250.19: 12 Times 114.217.37.170: 11 Times 115.23.177.102: 9 Times 116.110.19.58: 4 Times 117.50.184.161: 2 Times 117.72.81.35: 3 Times 117.206.237.193: 9 Times 118.122.93.139: 5 Times 118.194.235.201: 10 Times 118.195.182.56: 4 Times 119.96.157.188: 5 Times 120.48.98.125: 4 Times 121.224.115.232: 24 Times 122.96.151.110: 17 Times 125.228.118.173 (125-228-118-173.hinet-ip.hinet.net): 10 Times 129.205.2.18: 9 Times 134.17.16.19 (19-16-17-134-cloud.mts.by): 2 Times 143.110.176.215: 13 Times 154.70.102.114 (host-154.70.102.114.mtn.cm): 12 Times 155.4.244.169 (h-155-4-244-169.NA.cust.bahnhof.se): 6 Times 159.203.93.39: 24 Times 165.22.217.96: 10 Times 171.251.28.38 (dynamic-ip-adsl.viettel.vn): 4 Times 172.105.102.42 (dev3.academyforinternetresearch.org): 1 Time 179.251.135.123 (123.135.251.179.isp.timbrasil.com.br): 12 Times 181.188.159.138 (SCZ-181-188-159-00138.tigo.bo): 2 Times 183.15.178.38: 23 Times 183.56.216.153: 8 Times 185.93.89.118: 10 Times 185.203.236.212: 7 Times 185.255.91.221 (static.221.91.255.185.clients.irandns.com): 11 Times 186.121.205.29 (static-186-121-205-29.acelerate.net): 10 Times 186.233.208.13: 7 Times 190.244.25.245 (245-25-244-190.fibertel.com.ar): 15 Times 192.241.136.82: 15 Times 193.32.162.134: 55 Times 193.32.162.136: 4 Times 193.32.162.157: 15 Times 193.70.0.34 (vps-e534937b.vps.ovh.net): 18 Times 195.178.110.232: 99 Times 195.201.27.225 (static.225.27.201.195.clients.your-server.de): 1 Time 196.251.88.103: 1 Time 198.7.112.107 (vmi2068732.contaboserver.net): 6 Times 202.157.176.210 (mail.magis.id): 11 Times 203.23.199.85: 13 Times 213.165.85.145 (ip213-165-85-145.pbiaas.com): 11 Times 219.92.95.24 (sgb-95-24.tm.net.my): 19 Times 221.226.17.34: 11 Times system login attempted: daemon : 2 Times proxy : 1 Time root : 907 Times www-data : 1 Time received disconnect: [preauth] : 255 Times Bye Bye [preauth] : 1373 Times Bye [preauth] : 137 Times error: Protocol major versions differ: 2 vs. 1 : 2 Times error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 1 Time error: kex_exchange_identification: read: Connection reset by peer : 11 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times dictionary attacks: 661 unique usernames. 1234 123456 12345678 888 a1 aaa abcd access accounting activemq ada adam adm admin admin01 admin1 admin1234 adminftp administrator agenda agotoz ahmed airflow ajay akbar akshay al alan alexandre algorand alireza alma alumni aluno amalia amir anand ander andi andre andrew anton api appuser arch arkserver aron ars arun aryan audit authority autrede avax axway azuracast azureuser backend banana barcelona bbbb bch ben binance bit bitcoin bnb bob boda boom btc btc1 bun can casa castle centos charles charlie cheeki cheng chrome chromeuser cindy cloud clover cma com connect connor console copyuser costa couch crs csw cts cxz cyr cys dahua dana dangulo daniel danya dasusr1 david dayz db2inst1 dbg dbuser ddd ddev debian default delegate delphi deluge den denis denver deploy deployer deposito developer developers devops diego dima dimas diquest discord distro divya dlinares dmp dock dockeruser doge donald dong donna dot dp dragon Dual duncan dusan ec2-user ecc edit edu eduard egarcia ehsan elastic elasticsearch elena eli elsearch enrico enter eos erpnext es esearch esuser eth fa factorio filecoin finance fish frank frappe freddy freshlogs ftm ftp ftp2 ftpadmin ftpadmin1 ftp_id ftp-test ftptest ftpupload ftpuser g gabriel gahn gameserver gandalf gaurav ged gf gg gh gis git gitlab gitlab-runner gptftp gpu grid gu Guest guest guestuser guille guo gyli hack hadoop haha halley halo hammad harry hdm hdoop helena hengshi hesam hexing hfu hk hlm homo howard hpc hpc-riscv hr2 hrd hrm hruser hsh httpd hubin hxw ian icaro icecast id ignacy images infra init ins inspur installer integral intel intelbras ionela ipfs ismail jack james jenkins jessica jiel jim jira jirka jit jitu joaquin john joker jorge joseph joshua julian julie jyp kafka kaikai kamil kapil kariman kata katia kazakov kguzman kian kiana kid kigere kiosk km kraken kris kristen ksiegowosc kubeadmin kunal kyle l4d2 laci lara lars lby ld lea lee leo leon lfc liangming lido life ligang lily link linux livia lixiang liyan logan loginuser lol lorena lotus low lruiz ltc ly lynn lyy m1 magdalena magnus mahsa management mangesh mania manu mapr mapred mari mario martin mateo matic mc mcserver md miao michael miguel mina minecraft minh minikube mishra mission mohammad monitor morteza moth3r move movies mpi mpiuser mt muse mxy mysftp mysql mytest myuser nagios nam nano nas nathan nb near neko neo4j newftpuser newuser1 newusername nextcloud nexus nfsuser nick nico nikhil nikita njs node (none) nr oa oguz okx olivier omm oneadmin onlime_r open openwrt operator opus oracle orange ori original osk ossuser osvaldo owner palworld pancho papa parrot partimag paulo pavan perforce piyush polkadot port pos posiflex postgres ppr prakash prod proj proxyuser prtg prueba pula pzk qa qiuhan qiukeyue qyy radmin raghav rahim rahul raju rakesh ramesh ramon rana rancid rec redis rejoice relay remote repo reporting reza rftest richard riscv rizki rob robby robert rock roma romeo ronaldo roo root1 root2 rose rui runner ryan sadmin sahil sale sam samba sammy sanjay santosh sarah sauce sc scan scs scsadmin sdtd sepehr server server2 service sftptest shamim shanti sharon shawn shib shilei sigit sinusbot sjq slm smc snq sol solana sonarqube sos spam spark splunk squadserver ssm staging stake stas steam steamcmd student03 student1 student10 student3 student9 suporte support sushi sysadm sysadmin sz t128 tab tarun taylor tazos technik telecomadmin telegram telkom tempo tempuser test test1 test12 test2 teste tester testik testsftp TestUser testuser thang theta thomas tibero tina tip tol tom toto trx ts3server ttbot ttx tushar tux tx uat ub ubnt ubuntu uni unifi uniswap uno50 uno85 upload usdc usdt user user01 user04 user1 user62 userftp USERID userroot usuario usuario1 vagrant valheim validator vanessa vcloud vet victor vikash viola viper vipul vivek vlad vladimir vm vpn vps vss vyos wafer wanghe wb web webadmin west wh whz william windows wireguard wizard wms work wtl www wyw xbmc xiaojun xlm xmr xrdp xrp xuhao xxxx xyh xzzci yaroslav yjk ys yudi yusuf yuxiang z zaneta zec zeeshan zero zhang zhanglijuan zhangp zhangsan zhanna zhaoyu zl zt zte zvc zxf zzh