freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Sunday May 18, 2025 denied by configuration: 14.103.112.112: 15 Times 14.103.115.5: 2 Times 14.103.123.166: 2 Times 14.103.127.3: 1 Time 14.103.127.66: 2 Times 14.103.140.196: 17 Times 14.103.180.61: 2 Times 14.103.195.87: 2 Times 20.40.73.192: 14 Times 36.138.184.56: 5 Times 43.128.228.214: 15 Times 45.134.26.79: 25 Times 45.135.193.100: 1 Time 45.135.232.92: 16 Times 45.135.232.177: 25 Times 46.238.32.247 (ip-46-238-32-247.home.megalan.bg): 17 Times 49.247.37.22: 13 Times 51.159.54.22 (51-159-54-22.rev.poneytelecom.eu): 12 Times 59.98.148.5: 10 Times 61.188.178.199 (199.178.188.61.broad.nj.sc.dynamic.163data.com.cn): 1 Time 64.62.197.49 (scan-45c.shadowserver.org): 1 Time 68.183.38.111: 14 Times 73.135.38.134 (c-73-135-38-134.hsd1.md.comcast.net): 15 Times 80.94.95.15: 2 Times 80.94.95.112: 42 Times 80.94.95.115: 10 Times 80.94.95.116: 3 Times 82.153.157.96: 16 Times 82.207.8.194 (194-8-207-82.pool.ukrtel.net): 18 Times 85.215.212.144: 15 Times 91.239.9.194 (91-239-9-194.adinet.md): 2 Times 92.118.39.65: 6 Times 96.67.59.65: 17 Times 101.91.219.57: 7 Times 101.126.54.66: 5 Times 101.201.38.226: 1 Time 103.47.56.90: 2 Times 103.80.86.252: 17 Times 103.171.85.124 (103-171-85-124.cloud.leaseweb.net): 17 Times 103.181.142.243 (ip103-181-142-243.cloudhost.web.id): 15 Times 106.12.153.108: 3 Times 113.193.234.210: 13 Times 116.105.218.253: 4 Times 116.110.1.45: 4 Times 117.50.174.24 (fwkhxgz.cn): 2 Times 117.128.86.100: 3 Times 118.122.147.195: 3 Times 118.182.96.121: 5 Times 119.96.174.235: 14 Times 120.48.98.125: 2 Times 121.229.9.110: 6 Times 123.58.213.127: 13 Times 125.124.27.170: 14 Times 128.201.165.54 (54.165.201.128.cgnat.gpon.onetelecom.net.br): 16 Times 138.197.142.24: 13 Times 139.59.173.98: 13 Times 151.44.187.46 (adsl-ull-46-187.44-151.wind.it): 9 Times 154.221.28.197: 11 Times 157.230.185.206: 11 Times 159.65.174.160: 4 Times 171.251.26.119 (dynamic-adsl.viettel.vn): 3 Times 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time 175.6.211.191: 11 Times 179.127.2.149 (none.underplatform.com): 9 Times 180.76.105.165: 4 Times 185.93.89.118: 10 Times 185.156.73.233: 4 Times 185.156.73.234: 9 Times 186.117.149.128: 11 Times 188.121.107.131: 13 Times 193.32.162.130: 24 Times 193.32.162.157: 5 Times 194.0.234.19: 9 Times 194.0.234.107: 1 Time 195.178.110.26: 26 Times 195.178.191.5 (h-195-178-191-5.NA.cust.bahnhof.se): 2 Times 200.225.246.102 (200-225-246-102.dynamic.idial.com.br): 11 Times 201.76.120.30 (30.120.76.201.in-addr.arpa.verointernet.com.br): 15 Times 201.103.204.66 (dsl-201-103-204-66-dyn.prod-infinitum.com.mx): 15 Times 201.149.49.162 (cuallix.com): 15 Times 202.131.233.35: 13 Times 209.97.146.231: 4 Times 209.141.33.11: 4 Times 218.60.8.248: 4 Times 220.247.223.56 (56.sta.idc-2.slt.lk): 13 Times 222.92.90.190: 16 Times system login attempted: sshd : 3 Times backup : 1 Time news : 3 Times nobody : 1 Time root : 818 Times sync : 1 Time received disconnect: [preauth] : 91 Times Bye Bye [preauth] : 1175 Times Bye [preauth] : 51 Times Normal Shutdown, Thank you for playing [preauth] : 5 Times error: Protocol major versions differ: 2 vs. 1 : 2 Times error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 5 Times error: kex_exchange_identification: client sent invalid protocol identifier "USER anonymous" : 1 Time error: kex_exchange_identification: read: Connection reset by peer : 19 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times dictionary attacks: 395 unique usernames. 1 1111 111111 1234 12345 aaa abc abell adm admin admin-gui administrator adminuser alesia altibase amd an anAn andrew angel anonymous backups bar barryl black block bni bpm_admin bpsolutions brqc build centos changqiu changzhihao chao chenbx cheng chenjingwen chenliang chenqi client cloudroot cm cmf cogent config container crypto csh csy cxl1019 david db dbadmin dbuser dcmadmin debian default dell deploy deployer deployment desco descolgar dev dev001 developer device devop diab docker dockerroot dongxiao downloader drupal ds duci easyits ec2-user elagabalx emosfeedback emumail erp es events femas fengj fengxuelin fk foobar freshlogs ftptest ftp_user ftpuser gece george git gitlab gitlab-psql gitlab-runner glassfish GLY gordon gpuadmin grafana graphic gray guest gui guoxianzhi gxk gy gzm hadoop hai hang hanjiale hank hannah hex highgo hive hp huawei hypervisor hypervisors hzw hzx import index indicus inspur internal intro invite iredadmin iso jack jadmin japan jgao jiangxianbo jiangxiaohui jiangyue jiaohongyu jinzhibin joggler jony joro juicysol jupiter jutka kcquz kongchunzhang kuber kzy ladmin laoji lch lee liangshuang lijiaqu lijun linf lishiqi litao liu liuhai liulin liuruoze liuwei liuxing liwei lixb lixinjian lixuanjie liy liyang localtest looklog lsy luan lunatic lxc lxd lxy lyh lzb manager mariadb mas matrix max maxiu mbo minima moac mysql nbproject nccbm nesus nexus nginx niexiaowei nimeng node node3 (none) noreply nriet odoo office officer oladmin oldweb on onepark openshift3 openvpn operator oracle oracle2 oracletest owa owfadmin patient pbm penghang pi plasma plum podcast point postgres pritchard prueba ps public pwla python python3 qhn qxl rachel ranjie renjie robin role RPM sagar sammy sanctum server shangguan share shi shihzh shijunyu shinerio shx sjw slab sme1 software sol sola solana solb solv solx spare squid ssh sshadmin ssl stack storage student sunli sunxu supervisor support system tangqian telecomadmin telegram temp tenest test test01 test1 test7 test8 test9 teste tester tester1 testftp testing testuser textile tianpengyu tim tom tongzhongkai top troncoin tys ubnt ubuntu ui ujadmin uk upload usbmux user user0 user01 user1 user2 username usuario uzivatel vali validator vbox vmail vncuser vpn vps VT wangdd wangfangfang wanghao wanghy wangjs wangliuxin wangtao wangyan wangyoujia wangyp wangzefan wangzhongwei web webadmin webapp weblogic webmysql webpack webservd webuser weewx wh wireguard wp wuqianhui wxapi wxh wxy wzy xandeum xgwang xjy xuxiang xyy xzf xzh yanliang yanmengxiang yb yjx ys yyf zabbix zcc zhang zhanghuilong zhangjun zhangk zhangyun zhaochen zhaoqian zhicong zhoumeng zhoumengmeng zhouw zhuzijian zj zjd zjw zxy zy zyc zyy zzj