freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Friday June 13, 2025 denied by configuration: 1.26.67.250: 4 Times 1.95.190.50 (ecs-1-95-190-50.compute.hwclouds-dns.com): 1 Time 8.138.155.88: 1 Time 14.103.114.55: 11 Times 14.103.114.137: 10 Times 34.74.242.228 (228.242.74.34.bc.googleusercontent.com): 19 Times 34.80.240.228 (228.240.80.34.bc.googleusercontent.com): 23 Times 36.67.70.198 (sehati.tanjabtimkab.go.id): 5 Times 36.108.172.220: 4 Times 45.135.232.92: 12 Times 46.233.44.183: 4 Times 49.232.53.248: 21 Times 59.12.160.91: 5 Times 60.167.166.161: 3 Times 65.49.1.185 (scan-74-03.shadowserver.org): 1 Time 74.94.234.151 (74-94-234-151-Michigan.hfc.comcastbusiness.net): 14 Times 75.102.141.123: 22 Times 80.93.199.143: 29 Times 80.94.95.15: 23 Times 80.94.95.112: 32 Times 80.94.95.115: 14 Times 80.94.95.116: 20 Times 88.79.75.206 (intern.vito.ag): 8 Times 92.118.39.92: 26 Times 94.159.98.241 (138696.h2.nexus): 28 Times 95.167.133.86: 1 Time 101.36.126.138: 18 Times 101.126.143.71: 3 Times 103.23.135.156: 22 Times 103.30.40.136: 22 Times 103.59.95.142 (ip103-59-95-142.cloudhost.web.id): 20 Times 103.139.193.187 (ip103-139-193-187.cloudhost.web.id): 21 Times 103.187.147.35: 27 Times 103.193.176.131 (ip103-193-176-131.cloudhost.web.id): 22 Times 103.248.120.6: 29 Times 112.135.176.40 (v4.dns.slt.lk): 2 Times 113.141.166.35: 1 Time 118.122.93.139: 5 Times 120.48.98.125: 6 Times 120.48.175.241: 4 Times 121.229.7.121: 13 Times 122.156.167.62: 16 Times 124.226.213.119: 11 Times 125.18.49.130: 3 Times 125.124.178.223: 4 Times 134.122.8.241: 22 Times 134.199.145.72: 1 Time 134.199.193.11: 6 Times 139.9.68.73 (ecs-139-9-68-73.compute.hwclouds-dns.com): 3 Times 140.249.22.89: 24 Times 142.93.140.101: 6 Times 154.221.27.234: 12 Times 157.230.105.227: 2 Times 159.89.43.101: 12 Times 160.187.180.252: 22 Times 161.35.72.143: 28 Times 161.35.184.65: 13 Times 167.99.89.66: 21 Times 167.172.162.112: 3 Times 172.105.102.42 (dev3.academyforinternetresearch.org): 1 Time 175.207.13.86: 20 Times 176.31.163.10 (www.tattoo-price.com): 22 Times 176.65.148.55 (hosted-by.pfcloud.io): 1 Time 176.94.185.62: 19 Times 177.85.247.230: 21 Times 178.177.19.25: 6 Times 179.100.43.38 (179-100-43-38.user.vivozap.com.br): 8 Times 180.76.202.69: 21 Times 180.244.74.144: 26 Times 182.176.168.253: 20 Times 185.93.89.118: 5 Times 185.156.73.233: 24 Times 185.156.73.234: 14 Times 185.213.165.126 (static.126.165.213.185.clients.irandns.com): 24 Times 193.32.162.157: 5 Times 194.0.234.125: 1 Time 194.187.178.14: 1 Time 196.251.72.115: 5 Times 196.251.88.103: 1 Time 198.100.154.199 (vps-0374e817.vps.ovh.ca): 21 Times 209.38.249.168: 5 Times 212.83.166.6 (212-83-166-6.rev.poneytelecom.eu): 1 Time 218.78.46.81: 26 Times 221.159.150.85: 22 Times system login attempted: sshd : 3 Times bin : 1 Time nobody : 2 Times root : 404 Times uucp : 2 Times www-data : 1 Time received disconnect: Bye Bye [preauth] : 1099 Times Bye [preauth] : 59 Times Disconnected from invalid user 80.94.95.15 port 31816 [preauth] : 1 Time drop connection #10 from [111.67.199.209]:32800 past MaxStartups : 1 Time drop connection #10 from [111.67.199.209]:32812 past MaxStartups : 1 Time drop connection #10 from [111.67.199.209]:53034 past MaxStartups : 1 Time drop connection #10 from [111.67.199.209]:54342 past MaxStartups : 1 Time drop connection #10 from [111.67.199.209]:54354 past MaxStartups : 1 Time drop connection #10 from [111.67.199.209]:55654 past MaxStartups : 1 Time drop connection #10 from [111.67.199.209]:55696 past MaxStartups : 1 Time drop connection #10 from [111.67.199.209]:60860 past MaxStartups : 1 Time drop connection #10 from [92.118.39.92]:57748 past MaxStartups : 1 Time drop connection #11 from [111.67.199.209]:39184 past MaxStartups : 1 Time drop connection #12 from [111.67.199.209]:38402 past MaxStartups : 1 Time drop connection #12 from [111.67.199.209]:41694 past MaxStartups : 1 Time drop connection #12 from [111.67.199.209]:49376 past MaxStartups : 1 Time drop connection #12 from [111.67.199.209]:56520 past MaxStartups : 1 Time drop connection #13 from [111.67.199.209]:49342 past MaxStartups : 1 Time drop connection #13 from [111.67.199.209]:49356 past MaxStartups : 1 Time error: Protocol major versions differ: 2 vs. 1 : 2 Times error: beginning MaxStartups throttling : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 2 Times error: kex_exchange_identification: read: Connection reset by peer : 31 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 5 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 5 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 5 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 5 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 5 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 5 Times exited MaxStartups throttling after 00:04:04, 16 connections dropped : 1 Time dictionary attacks: 567 unique usernames. 1 123 1234 12345 7days a abc abhinav actions adc admin Admin1 admin1234 admin9 adminftp Administrator administrator admins adminvps adv ahmad ahmed ajay alana alberto alexus ali alin alma aluno amir amssys anaconda andreas andres andrew angus anna anon anonymous ansible aovalle arch arkserver array arthur asd asdf ashish ashok aso asus asw audit autcom autrede avinash azure azureuser baba baran bareos base bender bi bitwarden bkp bob boda bodega book bot bot1 bravo btc btest builder builduser ca cacti cam candy canvas casa casaos cat cc ccorrea cdr celeryuser centos chat cheeki chrism cindy cisco cloudadmin comp composeruser config consulta contact controlm core cosmos crafty crypto csuser ctf dangulo daniel daniil darwin dasusr1 dat db2fenc1 db2inst1 debian debianuser deep default delegate deleteme demo1 denis dennis deploy deployer desarrollo dev devops devtest devuser diego dietpi digital dima dimas django dls dmdba dockeradmin dogecoin dspace ec2-user ecs een ehsan elasticsearch elasticuser elise epadmin eric esearch es_user esuser eth ether ethereum ethereumdocker eva exx f fa factura fastuser felipe filippo finance firewall fivem foundry frappe frappe-user freddy freshlogs ftp ftp1 ftp_user ftpuser ftpuser1 g gabriel gameserver geo george ghost ghostcms git gitea github gitlab-runner grafana grid guest guilherme gustavo gwei hacluster hamed hamza hari hdfs hello henry hmsftp hp hrm ian igor iman imran info informix io ionadmin ionguest ismail it itadmin ivan j jacob james jarservice jason jason1 jb jboss jellyfin jenkins jmarquez joao john jonas joy julianna kafka kapsch karim karimi kashan kernel kevin khalid kim kingbase kp kris kyt lab ld leidyroa leo librenms light lighthouse liming linkdood lisi liwei loginuser long lorena louis luca lucas luna luo lx magda mailuser mamad manager manish marc marco maria mario mark marketing master mastodon matrix mc mcadmin mcserver mehdi metabase mika mike minecraft miner minikube misha mohamad mohit mongo monitor morteza mp musicbot mw myftp mysql myuser nam nas nathan netcool nick nishant nmr \\node node (none) novinhost nsuser ob ocean ociistst odoo odoo12 odoo13 odoo15 omar omm onlime_r opc openeuler openhabian operator oracle orangepi osadmin oscar oxidized ozzy pablo palworld panel patrol paul pbsworks pc peak pedrito pekai peter pgadmin pi pierre polkadot pool pos postgres prakash pratik praveen pritchard prod prometheus prueba pruebas python pzuser q qbtuser qiyuesuo qwerty r00t radius rain raul rc red redis riad rich rke robert rocky rootftp RPM runcloud rust rustserver ruth sabina saeed safeuser sales sam samba sambauser sammy samp sangoma sara sc scheduler scpuser scsadmin sdbadmin seafile sebas sebastian seekcy server server2 service sfserver sftptest sftpuser simon sinusbot sipv sistemas skyler sms soheil sol solana solr solv soporte squid sshadmin station6 steam steamcmd steven strapi student student3 student4 student5 studio superadmin supermaint superman support suraj syncuser sysadmin system systems taibabi tars tatiana teamspeak techuser tejas telecomadmin telegramapi telkom telnet tes test test001 test1 test2 test3 test4 test6 test7 teste teste1 tester testing testtest test-user testuser tg thai theo thomas tidb tmp tom ton trade-bot trade.bot tradebot training ts ts1 ts2 ts3 ttbot tv ty ubadmin ubnt ubuntu uftp under uno85 upload user user001 user002 user_1 user1 user11 user123 user3 user6 useradmin username usertest usher usman usuario usuario1 valheim validate validator vboxuser veera vendas vhpadmin vhserver victor vignesh vishnu visitor vlad VM vmail vncuser VPN vpn vpnuser vtatis vyatta vyos wang web web3 webapp web-user wfp wikijs william wilson winter wordpress www xiangyu xq xxx xyh yekta yesenia ygarcia yuxiang yxsong zabbix zcm zero zhaoxj zjh zmarin znc-admin zomboid zy