freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Sunday June 1, 2025 denied by configuration: 14.29.181.34: 19 Times 14.55.144.22: 24 Times 14.103.117.77: 21 Times 14.103.144.160: 13 Times 14.103.236.35: 5 Times 36.67.70.198 (sehati.tanjabtimkab.go.id): 3 Times 37.59.96.180 (vps-f765ff6b.vps.ovh.net): 2 Times 45.66.41.28 (45.66.41.28.inalan.gr): 2 Times 45.138.158.114: 24 Times 45.148.10.67: 35 Times 49.64.242.249: 22 Times 49.234.6.203: 6 Times 51.178.141.32 (vps-5e53976e.vps.ovh.net): 26 Times 64.62.156.202 (scan-88-0.shadowserver.org): 1 Time 67.222.132.207 (67.222.132.207.static.readycheapcloud.com): 24 Times 77.109.32.245 (77-109-32-245.newtone.dp.ua): 23 Times 80.94.95.15: 13 Times 80.94.95.112: 15 Times 80.217.244.205 (c80-217-244-205.bredband.tele2.se): 2 Times 83.234.160.50 (chita.vtb.ru): 23 Times 94.159.97.240 (97829.h2.nexus): 21 Times 94.159.102.167: 24 Times 101.200.243.197: 1 Time 103.170.4.19: 1 Time 103.181.143.99: 9 Times 106.12.153.108: 3 Times 111.67.197.113: 2 Times 113.53.89.36 (node-hlw.pool-113-53.dynamic.totinternet.net): 2 Times 113.140.93.51: 1 Time 116.105.208.66: 4 Times 116.110.8.13: 4 Times 116.110.13.4: 3 Times 116.110.78.219: 4 Times 116.110.125.175: 5 Times 117.72.221.84: 3 Times 118.26.37.53: 22 Times 119.96.157.188: 24 Times 120.48.98.125: 3 Times 120.48.175.241: 2 Times 120.230.142.78: 21 Times 121.204.179.231 (231.179.204.121.broad.xm.fj.dynamic.163data.com.cn): 6 Times 125.138.104.144: 3 Times 129.148.55.121: 2 Times 134.209.79.213: 21 Times 138.204.127.54: 24 Times 139.19.117.129 (inet-research-scan-5.mpi-inf.mpg.de): 9 Times 139.59.119.25: 24 Times 143.244.134.97: 25 Times 152.32.191.75: 20 Times 157.230.105.227: 2 Times 161.35.105.215: 23 Times 170.64.173.126: 2 Times 172.105.102.42 (dev3.academyforinternetresearch.org): 1 Time 178.128.236.79: 4 Times 178.176.250.39: 14 Times 181.176.62.39: 20 Times 182.44.72.96: 4 Times 185.93.89.118: 5 Times 185.185.71.46: 22 Times 185.213.25.179 (vmi2550511.contaboserver.net): 23 Times 186.103.169.12 (186-103-169-12.static.tie.cl): 24 Times 190.129.79.42: 21 Times 192.227.248.232 (192-227-248-232-host.colocrossing.com): 1 Time 193.32.162.84: 15 Times 193.32.162.89: 22 Times 193.32.162.97: 33 Times 193.32.162.136: 2 Times 193.32.162.157: 5 Times 194.65.144.243: 22 Times 195.179.227.224 (vmi2621610.contaboserver.net): 3 Times 196.250.208.207: 1 Time 198.244.188.27 (vps-8b41b50a.vps.ovh.net): 23 Times 200.155.38.219: 21 Times 221.151.84.79: 2 Times 221.182.17.140: 4 Times system login attempted: bin : 1 Time root : 474 Times uucp : 1 Time www-data : 1 Time received disconnect: Bye Bye [preauth] : 1061 Times Bye [preauth] : 42 Times drop connection #10 from [111.173.89.134]:43532 past MaxStartups : 1 Time drop connection #10 from [113.140.93.51]:39364 past MaxStartups : 1 Time drop connection #10 from [80.94.95.15]:59772 past MaxStartups : 1 Time drop connection #11 from [113.140.93.51]:60626 past MaxStartups : 1 Time drop connection #11 from [139.19.117.129]:52650 past MaxStartups : 1 Time error: Protocol major versions differ: 2 vs. 1 : 2 Times error: beginning MaxStartups throttling : 2 Times error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" : 1 Time error: kex_exchange_identification: read: Connection reset by peer : 23 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 9 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 9 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 9 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 9 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 9 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 9 Times exited MaxStartups throttling after 00:05:43, 4 connections dropped : 1 Time exited MaxStartups throttling after 00:09:09, 1 connections dropped : 1 Time dictionary attacks: 465 unique usernames. 1 7days a a3user aaa abbas abhi acs actions ada adc admin admin1 admin123 administrador adrian ahmad aiia ak72 alex alexandre algorand ali almacen aman ampal andrey angel ansible anthony apache apple arcgis arch arkserver artem arthur asha asterisk audit auditor automation avax avinash azure azureuser baba backend bayu bch ben benjamin bi big bitcoin blog bnb bob bot1 bot3 brandon btc builduser cacti castle cat cat1 cc ccapp chen chris chz cisco coco composer config connect contact core cortega crafty cs2srv cssever customer dan dangulo dat db db2inst1 dc dd ddd debian deep default demo dennis deploy deployer deployment dev developer developer1 developers devtest dgb distro django docker dockeradmin doge dot ec2 ecs edubook egarcia elemental elena eli elk eos epadmin eris erpnext es esearch esuser eth EVO exx fedora fil fred free freshlogs ftm ftp ftp_admin ftpadmin ftp_client ftptest ftp-user ftpuser ftpusers gabriel gameserver gary geonode george georgette gino git gitea gl glen gmodserver gns3 grid guest hack hadoop hamza harry hasan hbar hdoop heather hlw hossein hostinger ian icp igor import imran incoming informix insight installer intel intell intern io ionguest isaac itigr ivan jacob jane jarservice jb jenkins jerry jimmy jira joe john johnny jonathan jorge jose julian jupyter justin kali Keimo kernel khan kingbase kirro kitchen kocom kodi koha kunszenti ladyaspb lamoure laura ld lee lighthouse link log loginuser loguser long lost+found ltc luca m maarch mamad manoj manuel mapadmin mapr maria mario marje master matic mayuri mc mcadmin mcserver me media mehdi melnyk milad min minecraft minikube mininet misha mit mk mm mohammad mongod monika morgan mrodelo mtvps1 musikbot myfile mythtv near neko new newuser newusername nima node nodeuser (none) noreply nutanix odoo oneadmin operator ops oracle oraclne osboxes ospite oxidized patrol payment pedrito peertube pgadmin php pi ping popo posiflex postgres printer prod pwserver python pz q qtum qw r00t rahul ram readarr readonly redmine remote retag reza2 richard roberto rocketmq roman roots rstudio ruoyi ryan saberkkk saeed salim sam sandbox sandeep satis sebas secure security server server1 sftptest shib simon sina sinusbot sns snx sol solana solar sonar sopuser squid steam stefano sumlay1 super support susan svn syncthing sysadmin sysbackup sysroot system t128 taiko teacher tech tecnopos tejas temp1 terraria test test1 test4 teste1 test_user testuser theta tiffany tim tiptop tmp tom tomcat7 tommy ton trx ts3 ts3bot ts3server u1 uap ubnt ubuntu uftp uni upload usdc usdt user user02 user_1 user12 user15 user6 user8 usera useradmin user-backup userlogin username usman usuario vagrant valheim validator vastbase vboxuser vector vet vijay vintagestory vip vishal visitor vncuser vpn vpn1 vpnsvc vpnuser vps vscode wafer wang wangcx wcs webadmin webmaster webmin webuser wfp wialon wiki will wireguard work workflow wsq xampp xiangyu xlm xmr xrp yansong yaraque ymoreno yos yoyo ypwang yuxiang zabbix zc zec zhang zhaoxj zhihong zhongwen zimbra