freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Tuesday May 13, 2025 denied by configuration: 1.82.220.20: 7 Times 5.182.83.231 (undefined.hostname.localhost): 25 Times 5.196.23.21 (vps-5cc5820e.vps.ovh.net): 12 Times 14.103.118.226: 24 Times 14.103.140.196: 15 Times 14.103.170.171: 12 Times 14.103.204.23: 5 Times 24.7.216.47 (c-24-7-216-47.hsd1.mn.comcast.net): 1 Time 24.227.205.162 (syn-024-227-205-162.biz.spectrum.com): 1 Time 27.45.229.71: 1 Time 35.200.237.19 (19.237.200.35.bc.googleusercontent.com): 13 Times 35.207.200.77 (77.200.207.35.bc.googleusercontent.com): 15 Times 35.208.116.4 (4.116.208.35.bc.googleusercontent.com): 2 Times 36.64.211.93: 1 Time 36.138.184.56: 4 Times 39.174.91.173: 1 Time 41.94.88.49 (www.repositorio.ispg.ac.mz): 13 Times 43.156.240.7: 2 Times 45.134.26.79: 34 Times 45.135.232.92: 10 Times 45.135.232.177: 30 Times 45.147.79.140: 5 Times 45.148.10.67: 33 Times 45.245.61.114: 12 Times 46.101.2.7: 11 Times 49.37.37.166: 1 Time 58.209.82.184: 16 Times 58.238.74.138: 1 Time 60.174.40.155: 1 Time 64.62.156.154 (scan-83-2.shadowserver.org): 1 Time 65.20.251.170: 1 Time 67.140.86.41 (h41.86.140.67.dynamic.ip.windstream.net): 2 Times 77.235.26.239 (77-235-26-239.mega.kg): 14 Times 80.94.95.112: 49 Times 80.94.95.115: 13 Times 80.94.95.116: 18 Times 80.94.95.125: 29 Times 81.233.237.63 (81-233-237-63-no600.tbcn.telia.com): 1 Time 83.222.191.218: 1 Time 85.215.172.173: 4 Times 88.87.84.104 (88x87x84x104.static-customer.volgograd.ertelecom.ru): 1 Time 89.144.212.224 (089144212224.atnat0021.highway.a1.net): 11 Times 92.118.39.57: 5 Times 92.125.32.55: 25 Times 95.188.91.101: 18 Times 101.126.149.60: 5 Times 103.3.43.242 (static-242.43.3.103-tataidc.co.in): 1 Time 103.31.38.177 (ip103-31-38-177.cloudhost.web.id): 12 Times 103.59.160.99 (ip-103-59-160-99.indovm.com): 14 Times 103.67.79.165 (ip103-67-79-165.cloudhost.web.id): 13 Times 103.189.208.13: 8 Times 103.194.249.82: 1 Time 106.12.153.108: 3 Times 107.173.10.98 (107-173-10-98-host.colocrossing.com): 23 Times 108.83.166.174 (108-83-166-174.lightspeed.dybhfl.sbcglobal.net): 18 Times 111.172.228.203: 5 Times 113.31.103.19 (vn0t7.cn): 6 Times 116.118.48.186: 15 Times 117.50.209.157: 2 Times 117.200.93.87: 1 Time 117.216.211.19 (static.ill.117.216.211.19.bsnl.co.in): 23 Times 117.241.78.89: 24 Times 117.247.204.32: 1 Time 117.248.107.130 (static.ill.117.248.107.130.bsnl.co.in): 1 Time 118.186.3.158: 7 Times 119.92.76.210 (119.92.76.210.static.pldt.net): 1 Time 120.48.98.125: 4 Times 122.96.151.110: 20 Times 123.58.209.115: 10 Times 125.23.132.74 (dsl-mp-static-074.132.23.125.airtelbroadband.in): 1 Time 125.140.244.144: 1 Time 137.184.97.100: 11 Times 154.198.50.40: 9 Times 154.221.24.114: 10 Times 156.233.233.67: 122 Times 160.25.168.2: 1 Time 160.30.205.227: 1 Time 170.64.237.203: 19 Times 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time 173.20.253.109 (173-20-253-109.client.mchsi.com): 1 Time 175.206.105.126: 1 Time 178.178.222.50: 1 Time 178.178.222.56: 1 Time 181.104.24.185 (host185.181-104-24.telecom.net.ar): 8 Times 182.176.125.34: 1 Time 183.15.120.50: 8 Times 185.81.78.32: 1 Time 185.93.89.118: 10 Times 185.139.228.179: 5 Times 185.156.73.233: 6 Times 185.156.73.234: 3 Times 185.213.165.150 (static.150.165.213.185.clients.irandns.com): 2 Times 186.233.208.13: 25 Times 190.129.122.185: 12 Times 190.204.24.143 (190-204-24-143.bto-03-p65.cantv.net): 1 Time 192.95.24.162: 16 Times 192.210.255.57 (192-210-255-57-host.colocrossing.com): 8 Times 193.32.162.136: 2 Times 193.32.162.137: 33 Times 193.32.162.157: 15 Times 194.0.234.16: 6 Times 194.0.234.19: 20 Times 196.28.226.125: 1 Time 198.20.252.107 (198-20-252-107.unifiedlayer.com): 13 Times 200.232.114.71: 1 Time 201.103.204.66 (dsl-201-103-204-66-dyn.prod-infinitum.com.mx): 24 Times 201.138.253.69 (dsl-201-138-253-69-dyn.prod-infinitum.com.mx): 13 Times 202.39.251.216 (202-39-251-216.hinet-ip.hinet.net): 12 Times 202.126.26.213 (knet202126026213.kvision.ne.jp): 1 Time 203.56.228.62: 3 Times 203.86.255.216: 4 Times 206.189.62.213: 15 Times 209.173.10.75: 1 Time 210.206.24.234: 1 Time 213.178.90.83: 15 Times 216.155.93.75: 9 Times 218.21.241.50: 1 Time 219.77.29.126 (n219077029126.netvigator.com): 1 Time 220.77.245.227: 1 Time 222.119.124.66: 1 Time system login attempted: sshd : 1 Time bin : 1 Time lp : 1 Time man : 2 Times nobody : 3 Times root : 1028 Times uucp : 1 Time received disconnect: [preauth] : 490 Times Bye Bye [preauth] : 935 Times Bye [preauth] : 91 Times error: Protocol major versions differ: 2 vs. 1 : 2 Times error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times error: kex_exchange_identification: client sent invalid protocol identifier "\376\a\001rootSSH-2.0-OpenSSH_7.4" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "\376\b\001adminSSH-2.0-OpenSSH_7.4" : 1 Time error: kex_exchange_identification: read: Connection reset by peer : 19 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times dictionary attacks: 607 unique usernames. 1 1111 123 1234 1234qwer a a1 aaa abc abc1 acs action ada adm admin admin123 Administrator adminuser aldo aleks alfalak algorand alink altair amax amber amine amir ams andrea andy aniket anita anna anonymous ansadmin anshul apache appadmin appuser ar area arif arkserver armin array artem arts aryan ashish aso astro auction autobuild automation av avax az bb bbbb bch bd beck biadmin billing bing bioinfo bitcoin bitrix blog bnb bob bobi bobo boss botuser bounce btc bvb byp ca cacti caja caja01 caja1 caleb campus cape cardano carlos cdr centos chandan chin choi chromeuser chz cisco cliente cloudera cloud-user clover cmss cnt compiler config connect contest copyuser coremail cvsuser cxc cxd cyril cyrus damon daniel darwin dat database david davide dayz db dc deb debian default den deployer deployment desarrollo desktop dev develop development devops dgb diego diquest dispatcher display docker doge dominic dong dontstarve dps dspace duchen dummy e echo edi editor ehsan elasearch elastic elasticsearch eli emil eos eren erpnext erpuser erwin es esadmin ester eth etirama eun example fabien factura fastuser fateme fede federica fedora felipe felix fernando fgu fh fil filecoin fin fish fivem flavia fns francesco frappe freddy freshlogs friedrich frontend ftm ftp ftp1 ftpadmin ftpsecure ftp-test ftptest ftpUser ftp-user ftp_user ftpuser ftpuser1 ftpusr fuad fuho gabriele ganesh gaston geonode git git-admin gitadmin gitea gitlab-runner gopal groupe guest guilherme hacluster hadoop hadoop1 haha hanna haoran haotian harbor hasan hbar headscale hehe helena hero hieu ho hongwang hr httpd huangwei huawei hugo hunter icp images incoming indico infinity info1 ingres integral intell intern ipfs iran jack jacob james jane japan jay jean jenkins jgomez jia jinny joao jona jonathan joy jrodriguez k8s kafka kamran kas kav kernel kevin key kf king kk kms kobo kramar lab labtech laci lad lai landi lando last liang link lisa liz lms loginuser lotus ltc lukman mahima mailadmin mailman maint mainuser malik manager marco mariadb marjan marty matheus matic matrix max maxwell metro middleware mikey minecraft miner mir ml mm mojia monerod mora mostafa msf myappuser mysftp mysql mythtv nagios navid near nessus netlogon nexus nguyen nic nick niko nikola node nodejs nodered (none) nutanix ociistst odoo oem off omega oneadmin onlime_r onlyoffice openeuler operator oracle pagano pam pandora peace pepe phoenix pi ping plexuser pliki podcast pop pos post postfix postgres pradeep pre precio01 production proftpd prueba pterodactyl public pw pymes python pyxis pz qia qtum rabbitmq rain raj rajesh ram rancher rasel ravi rbs redis reelftptv registry remote repo rishi Rizve rob robby robert roberto rocco roger rollserv rony rust saas sachi sai said salim samba sambauser sambit sammy sand sansforensics sara sb sean sebas send serwis sgd sgt sharan shared shib simo simple sistemas site site24x7-agent siva sl snx soksuser sol solana solr sonic spooler squid staging steam steamcmd steven storm student02 student_1 studio Sujan support supports svn sybase syncthing sysadmin system t t1234 taiga tallerv tan teamspeak teamspeak3 temp tempuser Test test test001 test123 test8 test9 testa teste tester testuser testusr testy tet theta tianyu tibero tkadmin tmp2 tomcat tomcat7 tonmx trade training trx ts3user tv ubnt ubuntu ubuntuserver ukschool uni unifi up updb upgrade usdc usdt user user0 user02 user03 user07 user1 user123 user2 user42 user8 user9 USERID username users usr1cv8 usuario va valera validator vas vet vikash violet vishnu vlad vncuser VPN vpn vscode wahid waleed wangjia wangqiang wangzhiyong was wasadmin wd web3 webapp webkul webuser weiqing west whr wiki will work worker worker1 wss ww www xiaoxiao xiaoyu xl xlm xmr xr xrp xsw xt xtest xuxu xx xxx xy yangyu yarn ydy yesung yogi yt yusuf yxu yy zahid zec zftmu zh zhangyi zhaoyu zlz zookeeper zxg