freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Wednesday June 11, 2025 denied by configuration: 1.26.67.250: 1 Time 1.94.112.164 (ecs-1-94-112-164.compute.hwclouds-dns.com): 1 Time 8.221.139.48: 1 Time 14.103.115.117: 9 Times 14.103.124.188: 7 Times 37.221.66.148: 20 Times 43.154.195.142: 7 Times 44.220.188.129 (ec2-44-220-188-129.compute-1.amazonaws.com): 1 Time 45.135.232.92: 9 Times 45.140.19.133 (denis.dns.ru): 4 Times 46.165.220.195: 1 Time 46.191.141.152 (46.191.141.152.dynamic.ufanet.ru): 11 Times 51.68.128.174 (ip174.ip-51-68-128.eu): 20 Times 51.75.194.10 (vps-f8f463b5.vps.ovh.net): 12 Times 51.75.207.206 (vps-3251c2e2.vps.ovh.net): 30 Times 52.233.1.108: 28 Times 60.234.135.20 (dynamic.skybb.net.nz): 2 Times 62.210.97.97 (62-210-97-97.rev.poneytelecom.eu): 22 Times 64.62.156.15 (scan-60-5.shadowserver.org): 1 Time 80.94.95.15: 46 Times 80.94.95.112: 34 Times 80.94.95.115: 8 Times 80.94.95.116: 6 Times 93.123.109.191: 10 Times 100.36.126.148 (pool-100-36-126-148.washdc.fios.verizon.net): 1 Time 103.82.93.28: 30 Times 103.119.92.117: 11 Times 103.139.192.65 (ip103-139-192-65.cloudhost.web.id): 30 Times 103.165.218.190 (190.218.165.103.net.iforte.net.id): 19 Times 104.199.151.189 (189.151.199.104.bc.googleusercontent.com): 18 Times 109.134.188.174 (174.188-134-109.adsl-dyn.isp.belgacom.be): 23 Times 118.45.205.44: 23 Times 120.48.98.125: 9 Times 121.18.119.82 (hebei.18.121.in-addr.arpa): 1 Time 152.32.250.188: 1 Time 168.119.180.252 (static.252.180.119.168.clients.your-server.de): 3 Times 172.190.89.127: 30 Times 176.31.163.10 (www.tattoo-price.com): 23 Times 182.93.50.90 (n18293z50l90.static.ctmip.net): 30 Times 183.104.104.209: 2 Times 185.93.89.118: 5 Times 185.156.73.233: 9 Times 185.156.73.234: 8 Times 185.213.164.197 (static.197.164.213.185.clients.irandns.com): 9 Times 187.212.35.121 (dsl-187-212-35-121-dyn.prod-infinitum.com.mx): 25 Times 192.210.255.57 (192-210-255-57-host.colocrossing.com): 23 Times 193.32.162.157: 5 Times 194.0.234.93: 1 Time 194.0.234.124: 1 Time 194.0.234.149: 1 Time 196.189.87.177 (aii.et): 4 Times 198.24.79.245 (syn-198-024-079-245.biz.spectrum.com): 1 Time 198.46.177.109 (198-46-177-109-host.colocrossing.com): 22 Times 206.189.133.78: 1 Time 210.79.191.159 (ip210-79-191-159.cloudhost.web.id): 26 Times 219.152.170.185: 11 Times system login attempted: sshd : 2 Times nobody : 2 Times root : 354 Times uucp : 1 Time received disconnect: Bye Bye [preauth] : 647 Times Bye [preauth] : 99 Times error: Protocol major versions differ: 2 vs. 1 : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 6 Times error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" : 1 Time error: kex_exchange_identification: read: Connection reset by peer : 23 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times dictionary attacks: 368 unique usernames. 1 12345 7days a abc abhi adam aditya admin admin1 Administrator adminuser ae ahmed alex alexandre alison allen alma aluno aman ambari amin amq angel anil ankit ansadmin ansible app appadmin arcgis arun as asd ashok aso autumn avery azure backend bareos be ben bender bernardo bitcoin bitwarden bkp bob boom bot1 brenden builduser cacti camtest cardano carlos cc celery cephuser ceshi chatbot cheeki cierra citest client cloud coder composer config cooper cron crypto csserver csuser cvsuser dante dasusr1 ddd deamon debian deelip default demo dennis deploy dev developers devopsuser dockeradmin ecs elena elias elsearch emily emma erfan erp erpuser es esearch esuser etherpad explore family fleek fox frappe fred freshlogs ftp_test ftptest ftp-user ftp_user ftpuser fw g geonode gino giorgio git git2 github gitlab-runner greg guest halo hari hdoop henry himanshu homeassistant howard hrzhu hu hugo imran ionadmin iot iptv ir israel jane jazmin jazmine jenkins jester joanna joao jose josh josue jrodriguez jy kali kamil kate katelynn katrina kernel kian kkadmin kocom kong kyla kyt laura ld len lighthouse linuxadmin liu liyang loguser logviewer macy madmin maks mana manuel mary master mastodon mathew mayuri mcadmin mcuser me media mgeweb min morteza msf myappuser mysql nancy neko netcool newuser nginxuser nick NL5xUDpV2xRa nmr noburo nominatim (none) nurul nvidia ociisstd odin odoo odoo12 odoo15 olivier ollama omega oneadmin open openbravo operador operator oracle pal patricia paul pedrito pepe perla pgsql ping pivpn plexuser podfolio postgre postgres postgresql precio01 production profe proxyuser prueba psg q raaj rachael rahul rain readarr reza2 roberto robin root2 rooter RPM ruth saas saeed salim sanjay sarah saude scott scpuser scsadmin sdbadmin sepehr server2 sftp sftptest sftpuser simon sistema slurm smbuser sms spectrum squid sshadmin sshtest sshuser stack steam steve student student4 Sujan superadmin support svn swadmin sysadmin system t128 tab teamspeak tech techadmin telecomadmin temp template tempuser Test test test1 test3 test4 teste teste1 testing testmail testuser theta tidb tim tkadmin tomcatuser tommy ts3 tuan tv uat ubnt ubuntu ubuntu2 uftp uji uno85c user user1 user11 user14 user2 user6 user9 useradmin userftp username userone usuario utente uzivatel valheim vboxuser ventas05 vhserver vignesh vinay vincent VPN vpn1 vps vyatta webuser work wuhan xiaoming yaya youssef yuan yue yy zackary zane zh zhangsan zjh zte