freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Saturday June 21, 2025 denied by configuration: 5.193.232.234: 23 Times 8.221.139.48: 1 Time 14.29.181.34: 15 Times 14.63.196.175: 25 Times 14.103.91.55: 3 Times 14.103.118.212: 12 Times 20.127.55.146: 25 Times 27.254.235.13: 7 Times 34.101.240.144 (144.240.101.34.bc.googleusercontent.com): 25 Times 36.112.132.249: 10 Times 42.115.169.50: 2 Times 45.135.232.92: 17 Times 45.154.1.226: 13 Times 64.62.197.198 (scan-50b.shadowserver.org): 1 Time 80.94.95.15: 47 Times 80.94.95.112: 33 Times 84.217.17.218 (84-217-17-218.customers.ownit.se): 2 Times 92.118.39.71: 5 Times 92.118.39.92: 26 Times 92.118.39.95: 23 Times 93.123.109.127: 4 Times 101.47.5.97: 23 Times 101.126.27.208: 5 Times 103.98.176.164: 24 Times 103.151.239.51: 12 Times 103.165.156.230 (103-165-156-230.megadata.net.id): 14 Times 103.215.81.209: 15 Times 113.105.100.5: 2 Times 115.190.21.238: 2 Times 116.98.175.54 (dynamic-ip-adsl.viettel.vn): 4 Times 120.48.98.125: 3 Times 123.143.12.102: 3 Times 125.138.104.144: 5 Times 128.199.33.46: 5 Times 160.202.8.218 (undefined.hostname.localhost): 18 Times 171.251.26.27 (dynamic-ip-adsl.viettel.vn): 3 Times 171.251.31.175 (dynamic-adsl.viettel.vn): 5 Times 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time 177.12.2.75 (fttx.cable-17712275.predialnet.com.br): 26 Times 181.143.226.69 (webmail.fabysport.com): 22 Times 185.93.89.118: 5 Times 186.96.151.198 (fixed-186-96-151-198.totalplay.net): 21 Times 187.212.35.121 (dsl-187-212-35-121-dyn.prod-infinitum.com.mx): 8 Times 192.227.248.232 (192-227-248-232-host.colocrossing.com): 3 Times 193.24.211.22: 1 Time 193.32.162.157: 5 Times 194.0.234.125: 2 Times 195.165.181.16 (mobile-user-c3a5b5-16.dhcp.inet.fi): 4 Times 196.189.87.177 (aii.et): 3 Times 198.20.252.107 (198-20-252-107.unifiedlayer.com): 21 Times 211.107.237.13: 1 Time 211.159.161.243: 2 Times 213.159.64.41 (vm3094775.stark-industries.solutions): 22 Times 221.222.184.230: 3 Times system login attempted: root : 383 Times received disconnect: Bye Bye [preauth] : 535 Times Bye [preauth] : 92 Times Client disconnecting normally [preauth] : 1 Time drop connection #10 from [113.105.100.5]:41514 past MaxStartups : 1 Time drop connection #10 from [113.105.100.5]:43924 past MaxStartups : 1 Time drop connection #12 from [113.105.100.5]:44470 past MaxStartups : 1 Time drop connection #13 from [113.105.100.5]:36416 past MaxStartups : 1 Time drop connection #13 from [113.105.100.5]:40070 past MaxStartups : 1 Time drop connection #13 from [113.105.100.5]:47790 past MaxStartups : 1 Time drop connection #14 from [113.105.100.5]:36406 past MaxStartups : 1 Time drop connection #14 from [113.105.100.5]:38948 past MaxStartups : 1 Time drop connection #14 from [113.105.100.5]:56558 past MaxStartups : 1 Time drop connection #14 from [113.105.100.5]:56574 past MaxStartups : 1 Time drop connection #15 from [113.105.100.5]:46116 past MaxStartups : 1 Time drop connection #15 from [113.105.100.5]:46122 past MaxStartups : 1 Time error: Protocol major versions differ: 2 vs. 1 : 2 Times error: beginning MaxStartups throttling : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times error: kex_exchange_identification: client sent invalid protocol identifier "GET //admin/login.asp HTTP/1.1" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET //webpages/login.html HTTP/1.1" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET /login HTTP/1.1" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET /remote/login HTTP/1.1" : 1 Time error: kex_exchange_identification: read: Connection reset by peer : 64 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times exited MaxStartups throttling after 00:02:50, 12 connections dropped : 1 Time dictionary attacks: 391 unique usernames. abc adc admin admin1 admin123 admin5 admin9 Administrator administrator adrian ahmad aiden airflow aj ak alberto alice alumno amin amine amssys ansible anthony api apple arch as asdf ashish ashton astra avinash Azure baba bala baran bastion bayu bkp book bot bounce brenda btc builduser caja candy canvas carlos casa cassie castle cgpexpert charan cheeki chrism cinema clara cmsuser composer config csgoserver csuser daniel db2admin db2fenc1 dbuser dc deamon debian debianuser deep delegate denis deploy deployer desarrollo develop diogo dls dmdba dogecoin donald ec2-user edubook elastic elena emanuel erp es1 esearch es_user eth ether ethereum ethereumdocker etherpad eva exx faisal felipe fluqueta flw forge fox frank frappe frappe-user free freshlogs ftp ftptest ftpuser ftpuser1 ftpuser2 fuho g game gateway gaurav gbasedbt ghostuser gina git gitea gitolite gits gmodserver gns3 grid guest gwei ha hadoop hassan heidi helen hello highgo hirata hossein hostinger I idempiere igor imran in info informix infra inspur int intern ismail it ivy jack jackett james jarvis jason jay jb jeff jenkins jimmy jing jira jito joe jose joyce jrodriguez jupyter kafka kai kamera kayleigh kevin keycloak kibana kk kong krystal ladmin lawrence lee leo librenms light lighthouse lin linaro linda linkdood lisi login mahdi manager manoj marina martin mastodon matthew mcserver meagan mhd miguel min mina minima mj mk moises mongod mourad mrodelo mysql myuser nami nasrin newuser nexus nikita nino nmr node (none) nushi odoo ogmuf oguz ollama omega omid openbravo openeuler operator oracle osama osboxes ozzy patrol payara pedrito pedro peertube pepe pi polkadot pos postgres prashant pratik production prueba pwserver quentin raju ramon raul readarr redis remote rich rizki rodrigo roman root1 root2 russell sa sagar salvador sam sambauser sammy samson sandbox scanner sdtdserver sean security server sftp sftpuser shubham sim singh sinusbot smart smb sns sol solana solr solv sonar squid station Sujan sumit supervisor support switch syncthing sysadmin system tabata taiga taiko teamspeak tech tempuser term2 test test1 testmail test_user testuser theo tiana tidb titan titus tmax tomcat tony toor trade-bot trade.bot tradebot tristen trung ts1 tuan tunnel tyrese u1 ubnt ubuntu uno85 User user user1 user10 user123 user13 user2 user3 user8 user-backup userdb userftp userlogin username username1 usuario1 uzivatel validate validator vendas victor vivek vlad vncuser vpn1 vps vyos wang web3 webapp weblogic wialon william work workflow wow www x xiangyu xiaoming xt yang ymoreno yue z zhaoxj zjw zxl zy