freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Tuesday May 27, 2025 denied by configuration: 5.189.175.113 (vmi2445756.contaboserver.net): 6 Times 14.103.27.46: 2 Times 14.103.31.218: 3 Times 14.103.46.177: 6 Times 14.103.112.100: 22 Times 14.103.118.153: 3 Times 14.103.195.87: 6 Times 14.225.3.79: 1 Time 27.112.78.153 (ip27-112-78-153.cloudhost.web.id): 24 Times 34.142.110.144 (144.110.142.34.bc.googleusercontent.com): 21 Times 47.83.5.54: 1 Time 47.103.157.194: 1 Time 51.83.66.236 (ns3145671.ip-51-83-66.eu): 4 Times 57.128.182.5 (vps-e4cf1c1e.vps.ovh.net): 18 Times 58.213.147.49: 6 Times 64.62.197.76 (scan-38o.shadowserver.org): 1 Time 80.94.95.15: 13 Times 80.94.95.112: 7 Times 80.94.95.115: 7 Times 80.94.95.116: 6 Times 89.252.140.204: 4 Times 92.118.39.61: 6 Times 102.210.80.6: 22 Times 103.75.162.154: 1 Time 103.82.21.8: 7 Times 103.217.145.144 (ip103-217-145-144.cloudhost.web.id): 18 Times 106.12.153.108: 3 Times 111.31.14.77: 1 Time 111.67.194.231: 3 Times 111.170.129.164: 3 Times 112.175.125.117: 21 Times 114.220.176.69: 4 Times 116.105.222.165: 4 Times 117.9.168.244 (dns244.online.tj.cn): 2 Times 119.96.173.169: 8 Times 119.187.164.226: 3 Times 119.188.168.235: 4 Times 120.48.98.125: 3 Times 121.52.147.5 (upesh.edu.pk): 18 Times 123.139.116.220: 21 Times 140.246.137.102: 5 Times 143.110.205.196: 18 Times 146.59.236.77 (vps-2768e10e.vps.ovh.net): 21 Times 161.35.214.176: 25 Times 167.71.101.119: 4 Times 170.64.185.212: 1 Time 171.251.29.121 (dynamic-adsl.viettel.vn): 3 Times 178.91.96.182 (178.91.96.182.dynamic.telecom.kz): 4 Times 179.51.153.37 (ip-179-51-153-37.eunapolis.netcentertelecom.net.br): 18 Times 182.44.72.96: 7 Times 185.93.89.118: 5 Times 185.156.73.233: 4 Times 185.156.73.234: 9 Times 186.233.208.13: 21 Times 187.33.59.116 (187.33.59.116.netone.com.br): 22 Times 190.202.131.222 (190-202-131-222.estatic.cantv.net): 5 Times 193.32.162.134: 21 Times 194.0.234.19: 11 Times 195.178.110.26: 17 Times 196.251.88.103: 2 Times 202.165.17.196: 21 Times 203.69.37.212 (203-69-37-212.hinet-ip.hinet.net): 2 Times 209.38.16.34: 1 Time 209.38.31.110: 1 Time 218.84.134.35: 3 Times 220.250.41.11: 2 Times system login attempted: sshd : 2 Times backup : 1 Time bin : 3 Times nobody : 1 Time root : 381 Times www-data : 1 Time received disconnect: Bye Bye [preauth] : 669 Times Bye [preauth] : 20 Times Disconnected from invalid user 80.94.95.15 port 15182 [preauth] : 1 Time drop connection #10 from [111.170.129.164]:33834 past MaxStartups : 1 Time drop connection #10 from [111.170.129.164]:9592 past MaxStartups : 1 Time drop connection #10 from [119.187.164.226]:48911 past MaxStartups : 1 Time drop connection #10 from [119.187.164.226]:63219 past MaxStartups : 1 Time drop connection #10 from [43.224.248.187]:33766 past MaxStartups : 1 Time drop connection #12 from [111.170.129.164]:14592 past MaxStartups : 1 Time drop connection #12 from [111.170.129.164]:32872 past MaxStartups : 1 Time drop connection #12 from [111.170.129.164]:42314 past MaxStartups : 1 Time drop connection #12 from [111.170.129.164]:52974 past MaxStartups : 1 Time drop connection #12 from [111.170.129.164]:61116 past MaxStartups : 1 Time drop connection #12 from [57.128.182.5]:35080 past MaxStartups : 1 Time drop connection #13 from [111.170.129.164]:23170 past MaxStartups : 1 Time drop connection #13 from [119.187.164.226]:46339 past MaxStartups : 1 Time error: beginning MaxStartups throttling : 3 Times error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 7 Times error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "USER anonymous" : 1 Time error: kex_exchange_identification: read: Connection reset by peer : 22 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times exited MaxStartups throttling after 00:01:27, 1 connections dropped : 1 Time exited MaxStartups throttling after 00:01:50, 3 connections dropped : 1 Time exited MaxStartups throttling after 00:05:39, 9 connections dropped : 1 Time dictionary attacks: 322 unique usernames. 1234 12345 a abaco abc acct activemq ada adam admin Administrator ahmad alberto alex allinone amanda amssys angela anonymous appadmin artem arthur asdf austin avinash backend bash bitrix bkp bnb bodega boom bot3 bravo bsd btc carraslo cat catharina cheeki chrism code cogent comp config confluence connect craft crypto cs2 csgoserver ctf daphne db db2fenc db2fenc1 deamon_root debian debianuser deep delete demo denis deploy deployer dev devops diquest distro doge donna dot dspace dummy edubook elagabalx elena eli emily erp erpuser es esearch esunny es_user esuser eth ethereum ethereumdocker etienne fastuser frederique freshlogs ftp ftp_client ftptest ftp_user ftpuser gabriel gabrielle game ganesh gaurav george ghost gitlab gitlab-runner gituser going guest hack hasan hdoop hduser hpc-riscv hu ibrahim icecast iker insight installer ionguest ir ismail it jack jackett jacob james janet jarservice jellyfin jenkins jessica jira john joseph josh jupiter k8s kafka katherine katja koha ladmin ladyaspb lauren lch learnkyu lee leo light lighthouse lihui liming linkdood liwei lsk ltc luis main maint mani mapadmin mapr marc maria marley massinissa mastodon mcserver michael mike minecraft mohamed monitoring mrodelo mtvps1 mysql natalie nb newftpuser nicole nikhil node (none) noreply odin odoo odoo13 omgserv oneadmin opc openeuler operator ops oracle ossuser patrol pc pdausr PlcmSpIpPlcmSpIp polkadot pos postgre postgres pp prueba pt pujie pwserver python pz qwerty r remote riad riscv robin rootadmin rooter RPM rstudio runner ruprecht rustserver saeed sahil sales sanctum sandbox sanjay saslauth sc sdbadmin sean server sftpuser shopping shubham sim sipv soheil sol solana solar solx soporte splunk spot spring sql squid sshadmin staging steam1 steam123 stefano steven student supermaint superv supervisor support svn syncuser sysadmin systems taiga tan telecomadmin temp Test test test123 test6 teste testtest testuser tgz timothy tk tomcat tommy toto troncoin trx ts ts1 ts3 ubnt UBUNTU ubuntu uftp umair usdc usdt user user_1 user1 user2 user_jenkins username usher validator vinay vncuser vyos wafer web webuser wiki will work xandeum xq xrp yangy yxsong zabbix zc zhaoxj