freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Wednesday May 28, 2025 denied by configuration: 14.103.27.46: 9 Times 14.103.112.14: 26 Times 14.103.117.145: 5 Times 14.103.118.76: 3 Times 14.103.127.230: 3 Times 14.103.133.102: 23 Times 14.103.140.142: 1 Time 24.9.141.31 (c-24-9-141-31.hsd1.co.comcast.net): 2 Times 31.182.120.211 (staticline-31-182-120-211.toya.net.pl): 18 Times 35.208.68.245 (245.68.208.35.bc.googleusercontent.com): 26 Times 37.148.206.165 (165.206.148.37.host.secureserver.net): 22 Times 43.252.229.139: 1 Time 64.227.130.206: 25 Times 65.49.1.136 (scan-69-04.shadowserver.org): 1 Time 80.94.95.15: 47 Times 80.94.95.112: 38 Times 80.94.95.115: 14 Times 80.94.95.116: 18 Times 85.208.139.157 (55363.ip-ptr.tech): 22 Times 89.47.53.19: 18 Times 92.118.39.61: 30 Times 92.118.39.90: 35 Times 101.126.30.126: 21 Times 101.133.235.172: 1 Time 103.28.57.98 (98.sprint-f7.matrixglobal.net.id): 21 Times 103.59.94.62 (ip103-59-94-62.cloudhost.web.id): 27 Times 103.149.86.208: 4 Times 106.12.153.108: 3 Times 107.189.31.222: 22 Times 111.170.129.164: 5 Times 113.134.212.168: 4 Times 113.140.93.51: 4 Times 114.220.176.69: 5 Times 116.98.164.241 (dynamic-adsl.viettel.vn): 4 Times 116.110.81.55: 5 Times 116.110.121.188: 3 Times 116.255.156.120: 4 Times 120.48.98.125: 2 Times 120.92.210.231: 4 Times 128.199.146.224: 26 Times 135.125.200.99 (vps-ce374ef1.vps.ovh.net): 23 Times 140.246.92.156: 3 Times 140.246.103.212: 9 Times 164.90.151.202: 4 Times 165.232.100.223: 27 Times 172.105.102.42 (dev3.academyforinternetresearch.org): 1 Time 180.180.216.207 (node-16tr.pool-180-180.dynamic.totinternet.net): 3 Times 180.184.160.246: 4 Times 180.252.226.233: 22 Times 185.93.89.118: 5 Times 185.156.73.233: 12 Times 185.156.73.234: 21 Times 193.24.211.22: 1 Time 193.32.162.89: 29 Times 193.32.162.134: 34 Times 193.32.162.157: 5 Times 194.0.234.19: 30 Times 195.178.110.26: 14 Times 196.251.88.103: 1 Time 210.63.204.28 (hc210-63-204-28.static.apol.com.tw): 3 Times 223.197.186.7 (223-197-186-7.static.imsbiz.com): 25 Times system login attempted: sshd : 3 Times nobody : 2 Times root : 313 Times sync : 1 Time uucp : 1 Time www-data : 1 Time received disconnect: Bye Bye [preauth] : 621 Times Bye [preauth] : 76 Times Client disconnecting normally [preauth] : 1 Time error: Protocol major versions differ: 2 vs. 1 : 2 Times error: kex_exchange_identification: read: Connection reset by peer : 18 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times dictionary attacks: 431 unique usernames. 1 1111 12345 7days a a3user aaa aarseth abhinav adm AdmiN admin admin123 adminftp administrador Administrator afa airflow ajeet aleo aleonode alex alexandra alexis allison alma aman amssys angel ann anonymous ansible anton appadmin array aso autcom authority automation autrede av Azure backups base bastion bayu bender binance bitrix bitwarden bodega boom bot botuser btc btc1 btf builder cam carlo carlos casaos cdr celeryuser centos ceshi cgpexpert charles chloe clamav cody coffee config congxing connor cortega crm crypto csserver csuser ctf cyril daniel daoperator david db dd debian default degen delegate demo demo1 dennis dev1 devops diogo dmdba dmitry dockeradmin dogecoin donald dot dspace edge elastic elijah eliott erpuser es esuser eth ether ethereum ethereumdocker etherpad evan exx fastuser filecoin filippo fluqueta flw forward frappe fred freshlogs ftp ftpuser gameserver gbd git git_argus github gitlab-runner gl gnome gns3 gokul grafana greg grid guest gwei hacluster hadoop hailey hari hduser himanshu hisplat homeassistant hossein hubble iman installer isaac isaiah james jared jarservice jb jeff jenkins joao john jonathan joseph juan juicysol julian JUP jup jupiter justin kali kamil kevin khalid kim kirk kirkwood kong kp kraken kyt lab laravel lch leidyroa leonardo lido light lighthouse lin linux liquidator liquidity lisi liu loginuser lorena lotus lucas luis luke luo m mackenzie magdalena maggie manager manish manuel maria mark mason massa master matrix mehdi melissa mgeweb michael milad miladmim mina mininet mmd monitor mostafa mrodelo msf mysql namada nathaniel network3 newuser newusername nikhil nlp node nodeoperator nodeuser nominatim (none) nutanix ociisprd ociistst odoo odoo13 office okx omega oneadmin onlime_r openbravo openhabian operator optimism oracle ossuser ozzy partimag patrol pedro pgsql pi ping pion polkadot posiflex postgres postgresql pramod printer pritchard production prueba pruebas public purchasing python q qiuhan qw qwe r rajesh rebecca report riad richard rke rob robert role1 root11 root2 rooter RPM rucgz runcloud rustserver s saas sandbox savannah scan scsadmin sdtdserver sean service seth sftpuser share shiva siva slave snark snarkOS snarkos sol sola solana solb solr solv sonar sophia soporte squid sshadmin sshtunnel sshvpn stake steam stephanie steve steven story student1 Sujan superadmin supermaint superset supervisor support svn syncuser system t tazos telecomadmin telegram telegramapi telnet Test test test1 test3 teste tester testuser tfsc theta thomas tidb timothy tk tony toto trade-bot trade.bot tradebot ts1 ts2 tunnel ubnt UBUNTU ubuntu umair unifi uniswap user user0 user001 user002 user07 user1 user5 user9 user_jenkins username userroot usher usuario validate validator vendas vincent vintagestory viper vivek vncuser vpn vyatta wcs web3 web-admin webadmin webmaster webmin william windows wms wsq www x xd xiangyu xray xuhao xxx xyh yangy yaraque ymoreno yoyo yuxiang zabbix