freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Monday June 16, 2025 denied by configuration: 8.138.154.105: 1 Time 13.67.94.200: 27 Times 14.103.73.80: 4 Times 14.103.104.36: 24 Times 14.103.113.53: 6 Times 14.103.116.0: 15 Times 14.103.123.80: 7 Times 14.103.127.23: 23 Times 14.103.243.87: 6 Times 31.15.169.22 (31-15-169-22.static.telemach.net): 3 Times 35.222.117.243 (243.117.222.35.bc.googleusercontent.com): 5 Times 36.41.186.5: 6 Times 36.133.1.162: 21 Times 36.133.40.112: 3 Times 39.109.126.152: 4 Times 45.135.232.92: 13 Times 51.68.137.240 (240.ip-51-68-137.eu): 19 Times 52.233.1.108: 22 Times 62.28.222.221: 4 Times 64.227.174.243: 12 Times 65.49.1.177 (scan-73-05.shadowserver.org): 1 Time 80.94.95.15: 30 Times 80.94.95.112: 31 Times 80.117.197.241 (host-80-117-197-241.pool80117.interbusiness.it): 28 Times 88.79.75.206 (intern.vito.ag): 28 Times 92.118.39.71: 1 Time 95.79.112.59 (95x79x112x59.static-business.nn.ertelecom.ru): 14 Times 103.139.59.214: 29 Times 103.153.190.121: 22 Times 103.183.74.130 (ip103-183-74-130.cloudhost.web.id): 13 Times 109.94.172.237: 26 Times 113.45.55.93 (ecs-113-45-55-93.compute.hwclouds-dns.com): 1 Time 116.105.209.52: 4 Times 116.105.214.98: 4 Times 116.110.89.54: 5 Times 117.216.143.31: 30 Times 118.122.93.139: 8 Times 118.193.43.167: 30 Times 120.48.98.125: 4 Times 121.178.185.141: 3 Times 125.124.114.150: 5 Times 145.239.66.32 (ns3086439.ip-145-239-66.eu): 5 Times 147.182.247.236 (ubuntu-24.04-nexus-erp): 30 Times 167.71.205.250: 23 Times 170.64.203.229: 1 Time 170.64.239.228: 1 Time 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time 173.24.234.197 (173-24-234-197.client.mchsi.com): 16 Times 176.65.148.55 (hosted-by.pfcloud.io): 2 Times 179.33.186.151: 20 Times 180.76.247.111: 7 Times 182.43.76.19: 9 Times 183.224.219.194: 1 Time 185.213.175.190: 28 Times 186.96.151.198 (fixed-186-96-151-198.totalplay.net): 19 Times 186.117.149.128: 4 Times 187.174.238.116 (customer-187-174-238-116.uninet-ide.com.mx): 3 Times 193.24.211.22: 1 Time 195.165.181.16 (mobile-user-c3a5b5-16.dhcp.inet.fi): 3 Times 202.51.214.99: 29 Times 202.168.179.141: 15 Times 209.38.81.49: 1 Time 210.79.191.159 (ip210-79-191-159.cloudhost.web.id): 22 Times 210.101.91.153: 14 Times 211.198.9.73: 2 Times 218.145.181.48: 2 Times 218.250.106.141 (n218250106141.netvigator.com): 29 Times system login attempted: backup : 1 Time daemon : 1 Time root : 275 Times received disconnect: Bye Bye [preauth] : 867 Times Bye [preauth] : 69 Times Client disconnecting normally [preauth] : 1 Time drop connection #11 from [183.224.219.194]:35118 past MaxStartups : 1 Time drop connection #11 from [183.224.219.194]:37256 past MaxStartups : 1 Time drop connection #11 from [183.224.219.194]:60014 past MaxStartups : 1 Time drop connection #11 from [61.171.61.78]:48958 past MaxStartups : 1 Time drop connection #12 from [14.103.127.23]:58992 past MaxStartups : 1 Time drop connection #12 from [183.224.219.194]:60162 past MaxStartups : 1 Time drop connection #13 from [183.224.219.194]:38948 past MaxStartups : 1 Time drop connection #13 from [183.224.219.194]:39910 past MaxStartups : 1 Time drop connection #13 from [183.224.219.194]:41968 past MaxStartups : 1 Time drop connection #13 from [183.224.219.194]:43262 past MaxStartups : 1 Time drop connection #13 from [183.224.219.194]:45932 past MaxStartups : 1 Time drop connection #14 from [183.224.219.194]:47752 past MaxStartups : 1 Time drop connection #15 from [183.224.219.194]:43102 past MaxStartups : 1 Time error: Protocol major versions differ: 2 vs. 1 : 3 Times error: beginning MaxStartups throttling : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 3 Times error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" : 1 Time error: kex_exchange_identification: read: Connection reset by peer : 25 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times exited MaxStartups throttling after 00:04:19, 13 connections dropped : 1 Time dictionary attacks: 474 unique usernames. 1 123 7days aa aaa abc acct activemq aditya Admin admin admin1 adminftp administrator adrian albert alberto alex ali alice aliyah allinone alma almacen amin amir ampal amssys andreas andres andrew angel ankit anne anton aovalle appadmin appuser arch ark arun as aso asterisk audit autcom automation autrede av avinash azureuser backend bayu be belkinstyle bitrix bitwarden bkp boda boom bot botuser btserver cacti caja cassandra cecilia centos ceshi charlotte clock cloud-user cmm code confluence controlm core crafty cron cs2srv csuser ctf dakota dan daniel danya david db2admin db2fenc1 db2inst1 dbadmin db_user debian denis dennis deploy deployer depot dev dev1 develop devuser dietpi digital distro django dmdba doadmin dockeradmin dokku dolphinscheduler ecs edge eduard egarcia elasticsearch elsearch eprints erp erpnext erpuser es esearch etherpad eva eversec fabian factura family fastuser finance fiscal fivem flectra flussonic forward frank frappe frappe-user fred freshlogs frontend ftp2 ftproot ftp_test ftp_user ftpuser ftpuser1 fuho gabriel ganesh george gg ghostcms git gitlab-runner gits gns3 gpadmin grace greg guest hadoopuser hallie halo hamid hammad hamza hdfs hdoop homeassistant hu iman incoming infoserve innova installer io ismail it jadmin jan jarservice jason jeff jellyfin jenkins jerry jinhan jira john jonas jonathan josephine jrodrig justin kamil kassandra keegan khalid kibana king kira kp lab laravel larry lch lee leidyroa leo lin linkdood linux linuxadmin lisa lisi liu livetest liyang local louis lrendon lucas luis luo maarch magento mailuser main mainuser mana mapr marc maria mario mayuri mcadmin mcserver mercedes meredith mgeweb mhd mika minecraft minetest minikube mininet misha mm mmd mobile mongo monika morteza mpi mpiuser mqm mrodelo mt mw mysql nabi newuser newuser1 nexus nginx nickolas nikhil nima nishant nisuser node (none) novinhost ntuser ociisprd ociispth odoo office omega omid opc openvpn oracle orange orangepi ossuser oxidized paco patrick pavel payara peertube pgsql pi pick posiflex postfix postfixtester postgres postgresql pratik production prometheus prueba psg pt public publico pwserver pz pzserver qbtuser qiuhan qw r r00t radarr rafael rahim rancher randy reagan redmine report roberto rocketmq root2 rootadmin runcloud runner rust rylee sam sambauser sammy samp sample sandbox sandeep sangoma satis sc sdbadmin sdtd server setup sfserver sftptest sftp_user sftpuser shania share shiny shiv sim simon sina sipv sistema sonar speedtest spring sql squid stack staging steam steamserver steven student5 studio super superadmin supermaint superman supervisor suporte support switch sysadmin system systems taibabi taiko team1 teamcity teamspeak temp term2 Test test test036 test2 test3 teste teste1 testuser theta tigergraph tim tiptop tk tmpuser tom tomcat7 tony toto ts3 uat ubadmin ubnt UBUNTU ubuntu user user03 user12 user123 user15 user2 user3 user4 user9 usera user-backup userftp user_jenkins userroot usher usuario1 utente vboxuser vhpadmin vinay vincent vintagestory viper vishnu VM vncuser VPN vpn vpn1 vpnuser vps vyos wadmin wangke webadmin web-user webuser wfp wglhi windows wms wordpress X305-unix xg xq xyh yang ygarcia ymoreno ypwang yupei yusuf z zh zhangwei zjh zjw zone zu