freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Friday May 23, 2025 denied by configuration: 2.194.194.58: 2 Times 14.63.160.31: 2 Times 14.103.81.109: 13 Times 14.103.107.228: 1 Time 14.103.118.190: 15 Times 14.103.170.144: 9 Times 20.12.41.6: 9 Times 20.127.55.146: 11 Times 36.67.70.198 (sehati.tanjabtimkab.go.id): 1 Time 42.123.115.126: 10 Times 44.220.185.58 (ec2-44-220-185-58.compute-1.amazonaws.com): 1 Time 45.134.26.79: 30 Times 45.135.232.92: 12 Times 45.135.232.177: 28 Times 45.148.10.240: 38 Times 51.222.30.51 (vps-efc42bd4.vps.ovh.ca): 13 Times 60.54.52.227: 21 Times 64.62.156.16 (scan-60-6.shadowserver.org): 1 Time 80.94.95.15: 7 Times 80.94.95.112: 16 Times 80.94.95.115: 12 Times 80.94.95.116: 11 Times 92.118.39.68: 35 Times 92.118.39.97: 20 Times 92.205.228.135 (135.228.205.92.host.secureserver.net): 13 Times 93.108.120.147 (147.120.108.93.rev.vodafone.pt): 4 Times 96.67.59.65: 11 Times 103.31.39.72 (ip103-31-39-72.cloudhost.web.id): 6 Times 103.137.75.74: 13 Times 103.146.159.74: 11 Times 103.171.85.124 (103-171-85-124.cloud.leaseweb.net): 17 Times 106.12.153.108: 3 Times 108.60.184.29 (108-60-184-29.sktn.hsdb.sasknet.sk.ca): 2 Times 112.95.227.2: 1 Time 116.110.23.68: 3 Times 117.247.178.81: 19 Times 119.188.171.173: 3 Times 120.48.98.125: 4 Times 121.224.115.232: 15 Times 128.199.128.242: 22 Times 137.184.97.100: 11 Times 151.44.174.142 (adsl-ull-142-174.44-151.wind.it): 6 Times 154.83.15.200: 6 Times 164.90.140.80: 4 Times 168.181.36.106 (168-181-36-106.cliente.wsinternet.com.br): 23 Times 171.251.22.7 (dynamic-ip-adsl.viettel.vn): 4 Times 172.105.18.94 (172-105-18-94.ip.linodeusercontent.com): 1 Time 172.105.102.42 (dev3.academyforinternetresearch.org): 1 Time 176.31.163.10 (www.tattoo-price.com): 19 Times 180.100.202.3: 3 Times 182.215.66.232: 1 Time 183.56.205.82: 14 Times 185.18.236.16 (era.jsr-it.nl): 14 Times 185.93.89.118: 10 Times 185.156.73.233: 11 Times 185.156.73.234: 21 Times 187.51.208.158 (187-51-208-158.customer.tdatabrasil.net.br): 11 Times 190.129.60.240: 1 Time 193.32.162.84: 2 Times 193.32.162.137: 14 Times 194.0.234.19: 21 Times 194.0.234.107: 1 Time 195.178.110.26: 31 Times 209.141.42.92: 2 Times 220.203.12.53: 11 Times 222.98.150.198: 2 Times system login attempted: sshd : 1 Time backup : 1 Time daemon : 1 Time nobody : 2 Times root : 527 Times uucp : 1 Time www-data : 1 Time received disconnect: Bye Bye [preauth] : 743 Times Bye [preauth] : 40 Times Disconnected from invalid user 80.94.95.15 port 35108 [preauth] : 1 Time error: Protocol major versions differ: 2 vs. 1 : 6 Times error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times error: kex_exchange_identification: read: Connection reset by peer : 20 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times dictionary attacks: 328 unique usernames. 1 1111 1234 a ada adm admin admin123 Administrator agnes ai airflow alan alex algorand alves andrew anonymous apimobile app applprod apps array artem avax azureuser backups bch bhanu bhykl bigdata bittensor bnb browser brqc btc btest build builduser burak c2 candidate carlos centos certftp ch chandan chensen chenwei christelle chz cl client clinton clone cogent config couch crs crypto csgoserver cvsuser dambrosio daniel dashuai dasusr1 dawn db debian debian1 decnet default demo deploy deployer dev dgb digital dma docker dockerroot doge dolphin dot drupal dsk elagabalx emo emumail eos eric erp es esuser eth eugene extern fedora fil filecoin fivem freshlogs fsf ftm ftp ftp2 ftp-user ftpuser gino git gitlab gitlab-runner gns3 gpu grafana gray grid guest gui guoyuhao gzz hacluster hadoop hai hbar hydra icp incoming info install installer internal invoker iptv ircd jack jayanthi jenkins jiangyue jimmy jmarquez jordi juicysol JUP jup jupiter kevin kingbase kiosk koha kuber lab laoji larry ldo lhy lijiguang lilu lingzhang liyingting lmk loginuser logviewer lotus lrendon lunasol lxj lzy magazyn magento maks map mark matic matrix maxiu mcadmin mika mirror mohammad mysql near nesus newftpuser newuser nginx niliqiang ningyuanyong node (none) noreply notify npm nutanix odroid onlime_r operador operator oracle oracle1 paul pbm phpmy pi pop postgres prashant prod prometheus prueba ps pwla qibaoyuan qtum r radius randy raul reelforge remoto renato rex rnada RPM rsync rtc sanctum sangoma scpuser server sgeadmin sherry sht sinusbot sistemas smith snx software sol sola solana solb solv solx speedtest squid sqy sso stack steam storm Sujan sunxu support svnuser sybase syslog system taiga taosiyan telecomadmin test test8 testuser textile theta tidb tim tmax tomcat tony troncoin ts3 tuxedo ubnt ubuntu usdc usdt user user1 user2 useradmin userroot usuario vagrant valheim validator vet vintagestory vlad vmail vpn vps wanghl wangr wangyan wangyuxiang wangzefan web webadm webservd webserver wedding wen wildfly work wwz1111 WYX wzy xandeum xjbw xlm xmr xrp xxx yanhao yelinhui yelj yjc ylx zabbix zcc zec zhang zhangtao zw zx zyc