freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Wednesday June 4, 2025 denied by configuration: 1.26.67.250: 4 Times 1.31.14.6: 3 Times 14.103.25.86: 5 Times 14.103.82.39: 4 Times 14.103.113.224: 6 Times 14.103.142.227: 11 Times 14.116.156.100: 20 Times 27.96.84.210 (ezecom.27.96.84.0.210.ezecom.com.kh): 2 Times 34.76.2.67 (67.2.76.34.bc.googleusercontent.com): 14 Times 34.123.134.194 (194.134.123.34.bc.googleusercontent.com): 23 Times 35.239.170.179 (179.170.239.35.bc.googleusercontent.com): 25 Times 36.137.99.125: 24 Times 38.72.89.25: 1 Time 40.76.142.77: 3 Times 43.252.230.158: 22 Times 47.250.80.158: 1 Time 57.128.173.133 (phryctoria.net): 21 Times 59.36.254.224 (224.254.36.59.broad.jm.gd.dynamic.163data.com.cn): 1 Time 64.62.156.80 (scan-65-0.shadowserver.org): 1 Time 80.93.199.190: 25 Times 80.94.95.15: 34 Times 80.94.95.112: 30 Times 80.94.95.115: 23 Times 80.94.95.116: 25 Times 83.227.59.178 (83-227-59-178.customers.ownit.se): 2 Times 85.18.236.229 (85-18-236-229.ip.fastwebnet.it): 20 Times 89.216.47.154: 27 Times 91.205.219.185: 23 Times 92.174.140.161: 5 Times 92.253.15.182: 27 Times 103.75.162.154: 3 Times 103.149.86.208: 4 Times 103.176.79.139: 19 Times 103.183.74.35 (103-183-74-35.cloud.leaseweb.net): 26 Times 104.28.157.111: 5 Times 104.28.233.73: 5 Times 106.12.153.108: 3 Times 106.13.78.99: 1 Time 106.51.1.63 (106.51.1.63.actcorp.in): 9 Times 109.167.197.20 (109-167-197-20.westcall.net): 16 Times 112.96.228.158: 5 Times 113.31.103.19 (vn0t7.cn): 7 Times 116.116.3.46: 3 Times 116.117.123.166: 4 Times 117.50.137.84: 3 Times 119.5.157.124: 18 Times 119.96.159.237: 4 Times 120.48.98.125: 5 Times 123.58.213.126: 22 Times 125.90.170.23: 4 Times 134.199.166.224: 1 Time 134.199.168.8: 1 Time 139.59.173.98: 20 Times 142.93.196.54: 7 Times 150.129.63.14: 27 Times 150.136.76.116: 43 Times 154.92.110.110: 19 Times 165.22.215.186: 27 Times 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time 172.237.133.6 (172-237-133-6.ip.linodeusercontent.com): 1 Time 175.155.13.140: 5 Times 176.65.149.153 (hosted-by.pfcloud.io): 21 Times 177.74.105.102 (177.74.105.102.maranet.net.br): 3 Times 178.217.173.50: 21 Times 185.93.89.118: 10 Times 185.156.73.233: 30 Times 185.156.73.234: 30 Times 185.235.16.48: 1 Time 185.241.208.204: 1 Time 186.117.149.128: 4 Times 191.111.247.129: 25 Times 192.42.116.210 (13.tor-exit.nothingtohide.nl): 1 Time 193.32.162.157: 5 Times 195.178.110.6: 40 Times 198.24.79.245 (syn-198-024-079-245.biz.spectrum.com): 1 Time 198.244.188.27 (vps-8b41b50a.vps.ovh.net): 20 Times 203.145.34.186 (ip203-145-34-186.cloudhost.web.id): 23 Times 203.150.162.250 (250.162.150.203.sta.inet.co.th): 23 Times 210.83.201.51: 1 Time 216.9.226.105 (documentos04d.maispont.store): 21 Times 221.182.17.140: 5 Times 222.108.100.117: 1 Time system login attempted: sshd : 2 Times games : 1 Time nobody : 2 Times root : 453 Times uucp : 1 Time received disconnect: Bye Bye [preauth] : 968 Times Bye [preauth] : 44 Times drop connection #10 from [116.117.123.166]:40210 past MaxStartups : 1 Time drop connection #10 from [116.117.123.166]:40212 past MaxStartups : 1 Time drop connection #12 from [116.117.123.166]:38716 past MaxStartups : 1 Time drop connection #14 from [116.117.123.166]:52454 past MaxStartups : 1 Time drop connection #15 from [116.117.123.166]:34882 past MaxStartups : 1 Time drop connection #15 from [116.117.123.166]:54068 past MaxStartups : 1 Time error: Protocol major versions differ: 2 vs. 1 : 2 Times error: beginning MaxStartups throttling : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" : 1 Time error: kex_exchange_identification: read: Connection reset by peer : 23 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times exited MaxStartups throttling after 00:06:09, 6 connections dropped : 1 Time dictionary attacks: 521 unique usernames. 1 1111 123 1234 12345 a aaa abel actions activemq adam adm ADMIN admin admin1 admin123 Administrator adrian ak alberto alex ali alina alireza allinone almalinux aluno aman amssys andres angelica angus anil anonymous anton api apple apps appuser arkserver array artem arthur aso asterisk audit auditor automation autrede avayah avinash Azure baba backend baran barman bayu beehive bender bi bianmanlin bitrix bodega bot1 botuser brandon brett britney brittney bruno builder bwadmin cacti caja01 caoxl carlos ccorrea cdr celeryuser cesar changjinxin chelsea chenweitest chris christian chui cinema citrix client clock cloud cmm code coder composeruser config contact copia coremail crafty cs2 csgoserver csr1dev csserver ctf cxj cyril daisy dan daniel dany dat dawson db2fenc1 dbadmin dc dci deamon debian debianuser debinj deep deepak default demo demo1 denis deploy deployment desarrollo desliga developer development dillon dls dlwsadmin docker dockeradmin dokku donald dspace edge edubook egarcia ei ekp elasticsearch eli elk enzo eoffice es es1 esuser eva evelyn exx faheem felipe finance fish fox fran frappe freshlogs ftp ftp1 ftp_id ftptest ftpuser ftpuser2 ftpuser3 fuyanjie fw gage gameserver ganesh ghost gino git gitadmin gitea github gitlab-runner gits gns3 gokul gpadmin groupe guest hacluster hadoop haha halo hasan hayley hdfs hdoop henry homeassistant hope hruser hu hurtworld igor iman imi incoming info int intel intell isabelle jacsom james janes jangita janice jarservice javad jb jeya jira joe jordan joyce julian julien jupiter kali kamil karim kazuyuki kennedy kevin khalid kian koha kristen kubelet lab ladyaspb laravel laura ld lee leecheng lenovo leopold librenms light liming linux liu local logviewer lol long lorena luis luo lydia magnos mailuser manager manoj manuel maria mario mark marketing maruszak mastodon matrix mauricio max mc mcadmin mcserver mega megu members meteo metricbeat michael miladmim min minecraft mininet mirror04 mk mmd moderator mohamed mohit mohsen mongo monika morgan mosquitto ms musicbot mysql nagios nb newuser nexus nfsnobody nieves nino nishant nmr nobuki nominatim (none) noreply nrk nutanix ob odoo17 off olivier ollama onlime_r opc openbravo openhabian operator oracle osama osboxes ospite ossadm park password patrick pavel peertube pgadmin philyang pi pokemon postgre postgres prashant pre printer prod prowlarr prueba psg puser pwserver python pz qwe qwerty rafael raul raymond renyun reporting retag reza rizki rke rocketmq roman root1 root11 rootftp roott RPM runner ruolin rust rustsrv ryan s1 saas sabina salim sam sambauser satis sc scan scott seafile sebastian security server sfserver sftptest sina sistemas slurm smb soheil sol solar sonarqube soporte speedtest squid sshadmin sshtunnel sshuser steam steam1 stefano stormtech stperez student2 student3 Sujan summer supermaint superman supervisor support syncthing system t128 taiko teamspeak tech techuser telecomadmin telegram telkom temp test test001 test1 test2 teste tester testmail testtest test_user testuser thomas tigergraph titus tk tmpuser tomcat10 tommy tony toor toto ts3server tsukamoto ubadmin ubnt ubuntu updates user user001 user02 user_1 user1 user12 user123 user3 useradmin user_jenkins username userroot usuario utah valera vastbase vendas ventas05 veronica vhpadmin vhserver vijay vinay vip vishnu visitor vpn vpn1 vpnuser vps vscode wang wangcx web website web-user wfp wialon wiki windows wireguard wms work wp wqmarlduiqkmgs wsq wuhan wxg x xbgpb xd xg xjz xt xuhao yusuf yxsong yy zabbix zhangsan zomboid zone zyx