freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Wednesday May 21, 2025 denied by configuration: 5.188.96.157 (5-188-96-157.umnyeseti.ru): 18 Times 8.134.159.4: 1 Time 14.253.149.9 (static.vnpt.vn): 4 Times 36.88.163.34: 14 Times 45.134.26.79: 29 Times 45.135.232.92: 15 Times 45.135.232.177: 36 Times 45.146.130.113: 1 Time 45.148.10.240: 37 Times 46.238.32.247 (ip-46-238-32-247.home.megalan.bg): 11 Times 51.38.231.116 (vps-dc0232f3.vps.ovh.net): 10 Times 54.39.18.122 (correo.eluniversal.com): 15 Times 65.49.1.85 (scan-57f.shadowserver.org): 1 Time 70.183.162.25 (wsip-70-183-162-25.ri.ri.cox.net): 1 Time 80.94.95.15: 6 Times 80.94.95.112: 45 Times 80.94.95.115: 9 Times 80.94.95.116: 19 Times 82.153.157.96: 9 Times 85.172.189.189: 16 Times 92.118.39.57: 5 Times 92.118.39.61: 28 Times 92.118.39.97: 15 Times 95.113.189.4 (dynamic-095-113-189-004.95.113.pool.telefonica.de): 2 Times 96.67.59.65: 4 Times 96.78.175.36: 3 Times 101.126.14.37: 1 Time 103.49.239.124 (ip103-49-239-124.cloudhost.web.id): 11 Times 103.139.193.187 (ip103-139-193-187.cloudhost.web.id): 10 Times 103.171.85.115 (ip103-171-85-115.cloudhost.web.id): 11 Times 106.12.153.108: 4 Times 109.94.172.86: 9 Times 111.67.201.36: 5 Times 111.172.228.203: 2 Times 112.16.179.140: 1 Time 112.96.230.85: 7 Times 116.105.217.186: 5 Times 116.110.28.123: 4 Times 118.122.93.139: 7 Times 120.48.86.198: 3 Times 120.48.98.125: 2 Times 123.129.224.123: 1 Time 125.88.210.44: 2 Times 129.80.226.103: 7 Times 134.122.1.0: 4 Times 152.32.172.94: 12 Times 155.4.244.107 (h-155-4-244-107.NA.cust.bahnhof.se): 12 Times 159.65.137.65: 11 Times 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time 179.179.193.12 (179.179.193.12.dynamic.adsl.gvt.net.br): 7 Times 180.76.139.209: 16 Times 180.253.163.63: 6 Times 182.215.66.232: 2 Times 185.93.89.118: 5 Times 185.132.98.215 (customer.kabeline.at): 1 Time 185.156.73.233: 13 Times 185.156.73.234: 14 Times 185.213.174.209: 21 Times 185.253.72.36: 6 Times 193.32.162.84: 12 Times 193.32.162.136: 1 Time 193.32.162.137: 48 Times 193.32.162.157: 10 Times 194.0.234.19: 32 Times 195.96.138.22: 1 Time 197.227.8.186: 11 Times 202.157.176.210 (mail.magis.id): 12 Times 206.172.46.162: 12 Times 209.97.155.64: 4 Times system login attempted: sshd : 3 Times bin : 1 Time nobody : 1 Time root : 558 Times uucp : 2 Times received disconnect: Bye Bye [preauth] : 702 Times Bye [preauth] : 66 Times error: Protocol major versions differ: 2 vs. 1 : 3 Times error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 1 Time error: kex_exchange_identification: read: Connection reset by peer : 22 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times dictionary attacks: 292 unique usernames. 1 1111 1234 12345 a ada adm admin admin123 administrador Administrator administrator ak altair amber amd anaconda anonymous appltest array avahi backups bar barryl block bnb boss bot btc btc1 cache carlos castle catherine chenhao chensong chenzhuo cisco cloud cogent college crypto cs csgoserver cuda cust cxy da dangulo danial daniel darko darren david db2as db2dasusr1 db2inst2 db2user debian default delegate desliga dev developer devtest discord doge dogecoin dot elagabalx elastic es eth ether ethereum ethereumdocker exploit exx family farm fernando filecoin fms frappe freshlogs ftp ftpuser git gitlab gonglu gpadmin guest gwei gzd hacker hacluster hadoop halt hanna hanx haoran haotian haproxy helpdesk hundsun hy ibrahim informix installer iptv jadmin jirka jlauf jobs joe jony judy juicysol JUP jup jupiter KBP2017 kernel kettle kevin kim kubeadmin kubuntu lab liguangli lihuairui linda link linuxadmin liubin lium liuqian liuruiqiang liwei liy liyou lizepeng lj lk login loginuser lotus ltc lxy lyh lzy m1 manager marc marko master matrix matt max michael mitch mmadmin moein mysql myuser nasrin nitrux NL5xUDpV2xRa node nologin (none) noreply nutanix nw omc onlime_r openbravo operator oracle oracle2 pawan pay pi plex pma polkadot postgres prueba pujie quentin qwadmin rajesh raju rdp rke salman sanctum scpftp server servlet shib sol sola solana solb solv solx speakin sshadmin st steam strona_1 student suguoyao Sujan suman sunqiwei super superman support suser sybase sysadmin system taozhuo techmin telecomadmin telegram telegramapi test test01 test123 teste testuser tong trade-bot trade.bot tradebot troncoin trx tt tw_admin ubnt ubuntu ujadmin uni urunadmin usdc usdt User user user1 user2 username usuario v2 vae valedon validate validator vbox vf vpn wang wangb wangjs wangli wangrui wangtao wangwei wangziheng web3 webservices wei wildfly wp www-admin wyt xandeum xjy xrp xubq yunion yxz yzh yzz zhengx zj zjw zlz zone zwt