freshlogs is the concept see https://www.freshlogs.ca/fl-ToS-Disclaimer.html Use https://freshlogs.ca/index.txt for complete long lines. Use https://freshlogs.ca/prev-index.d/ for previous posts. Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box. Added a quick list of unique usernames from dictionary attacks. Sunday June 22, 2025 denied by configuration: 14.29.198.130: 5 Times 14.103.115.25: 28 Times 14.103.117.75: 21 Times 14.103.117.98: 2 Times 14.103.118.25: 29 Times 14.103.127.242: 28 Times 27.111.32.174: 29 Times 27.254.235.13: 14 Times 37.195.171.219 (l37-195-171-219.novotelecom.ru): 1 Time 38.54.8.227: 21 Times 45.135.232.92: 17 Times 49.232.215.114: 2 Times 51.158.120.121 (121-120-158-51.instances.scw.cloud): 26 Times 51.178.137.178 (vps-fe6c4481.vps.ovh.net): 29 Times 60.221.239.232 (232.239.221.60.adsl-pool.sx.cn): 18 Times 61.188.205.76 (76.205.188.61.broad.nj.sc.dynamic.163data.com.cn): 6 Times 65.49.1.20 (scan-52k.shadowserver.org): 1 Time 73.148.29.153 (c-73-148-29-153.hsd1.va.comcast.net): 2 Times 80.94.95.15: 48 Times 80.94.95.112: 35 Times 80.94.95.115: 5 Times 80.94.95.116: 8 Times 80.191.247.45: 27 Times 85.175.226.39: 28 Times 91.77.163.86: 29 Times 93.123.109.127: 4 Times 101.36.123.173: 18 Times 101.126.27.208: 3 Times 101.201.38.226: 1 Time 101.226.180.6: 6 Times 103.151.239.51: 9 Times 103.155.86.212: 23 Times 103.165.156.230 (103-165-156-230.megadata.net.id): 9 Times 106.38.205.224: 5 Times 107.174.201.181 (107-174-201-181-host.colocrossing.com): 30 Times 110.53.126.241: 1 Time 115.91.91.182: 21 Times 115.190.21.238: 11 Times 116.110.27.203: 2 Times 120.48.98.125: 5 Times 121.13.236.122: 1 Time 121.179.106.204: 3 Times 121.229.7.121: 10 Times 123.108.70.145: 22 Times 134.199.225.42: 19 Times 136.232.203.134: 28 Times 139.19.117.129 (inet-research-scan-5.mpi-inf.mpg.de): 1 Time 146.59.80.142 (vps-8abc05fb.vps.ovh.net): 20 Times 146.59.95.254 (vps-c4881b1d.vps.ovh.net): 28 Times 147.0.206.46 (syn-147-000-206-046.biz.spectrum.com): 1 Time 158.174.211.17 (h-158-174-211-17.NA.cust.bahnhof.se): 25 Times 171.251.25.212 (dynamic-ip-adsl.viettel.vn): 4 Times 172.105.102.42 (dev3.academyforinternetresearch.org): 1 Time 172.174.5.146: 15 Times 178.19.235.29 (nat-178-19-235-29.net.encoline.de): 2 Times 181.116.220.12: 29 Times 182.93.50.90 (n18293z50l90.static.ctmip.net): 21 Times 182.229.10.141: 26 Times 185.93.89.118: 5 Times 185.156.73.233: 10 Times 185.156.73.234: 8 Times 187.212.35.121 (dsl-187-212-35-121-dyn.prod-infinitum.com.mx): 11 Times 190.104.25.210 (LPZ-190-104-25-00210.tigo.bo): 29 Times 193.24.211.22: 1 Time 193.32.162.157: 5 Times 194.0.234.19: 1 Time 194.0.234.93: 7 Times 203.150.162.250 (250.162.150.203.sta.inet.co.th): 20 Times 206.189.133.78: 1 Time 207.180.247.13 (vmi572253.contaboserver.net): 1 Time 213.155.195.169 (213-155-195-x.dynamic.b-domolink.net): 28 Times 218.78.60.105: 29 Times system login attempted: sshd : 2 Times nobody : 1 Time root : 348 Times uucp : 1 Time www-data : 1 Time received disconnect: Bye Bye [preauth] : 1002 Times Bye [preauth] : 68 Times Client disconnecting normally [preauth] : 1 Time error: Protocol major versions differ: 2 vs. 1 : 2 Times error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 3 Times error: kex_exchange_identification: read: Connection reset by peer : 56 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 6 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 6 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 6 Times dictionary attacks: 492 unique usernames. 1234 12345 a access acer acs adm Admin admin admin1 admin1234 administrator admins ahmad aj alex alexandre alexis ali alice alireza alumno amin amir anahi andreas andrew anil anna anon anonymous ansible anton apiadmin arkserver arun asag autrede azureuser baba backend backuppc bayu bbb bender best bitnami bitrix bob bot branden braxton brenda brody btest builder bwadmin caja cam castle cc centos cgpexpert chat clock cloudadmin config consulta craig crypto cuser dan dangulo daniel daniella danya david dbadmin dbkmp deamon deamon_root debianuser deep deepak demo demo1 dennis deploy deployer desliga dev developer devuser diego discord dmdba docker domain dspace eddie edubook egarcia elastic elasticsearch elemental elena ellie erp es esteban exx factura fluqueta foundry frappe frappe-user freshlogs ftest ftp1 ftp2 ftp_admin ftpadmin ftp_id ftptest ftpupload ftpUser ftpuser ftpuser1 ftpusers ftpusertest fuser gaurav gbasedbt george giorgio gisselle git gitea gitlab gitolite gloria gmodserver gns3 goga going gokul gpadmin grid guest hadoop hamed hdoop henry home hossein hp hpcadmin hruser hu i idf iman in info infra insight installer int ionadmin ionguest irvps isiah ismael ismail itadmin j jacob jacquelyn james jason jeff jeffery jenkins jenny jira jj joe john jonas jonathan josh joy julissa kafka kaitlynn kali kamil kevin keycloak khan kk kodi lab ladyaspb leo lfs lighthouse lihui liming linda linuxadmin lizbeth loginuser lol luciano luis luo mahdi mailtest mailuser manuel marco maria mariadb mark marshall marvin mas mc mcadmin mcserver me michelle miguel mike milad minecraft minecraftserver mininet misha mm mmd mohamad monika morgan mpi mqm mtcl mtvps1 mysql myuser nagios newuser newusername nfsuser nikhil nikita NL5xUDpV2xRa nmr noc node nodeuser nominatim (none) nsuser nvidia nxuser odin odoo odoouser oe office omar onkar openhabian openkm operator opsadmin oracle orange oscar ospite ossuser palworld panda pavel pedro pepe pg pi ping plex pool pop postfix postfixtester postgres precio01 production proxyuser proxyuser1 pruebasfe psg public pwserver pz pzuser q r radio radius rahul rails ram raul reelftptv renee renyun reporting retag rigo rocketmq rocky rodney roman root2 rootftp roott RPM rstudio rsync runcloud ruslan s1 saeed sales salim sammy samp sandeep sanket santana scan sendmail sepehr server server1 serveradmin seyoung sftpadmin sftptest sftpuser share shubham sinusbot slave smb smbuser sms sockduser socksuser soheil sonar sopuser squid sshadmin stack steam stperez student superman superv support supports svn sysadmin systems szy t1 taibabi taiga teamspeak tech tejas telecomadmin telkom temp tempuser terraria terry test test001 test01 test1 test123 test1234 test2 test3 test4 test5 test6 testadmin testbox teste teste2 tester testing testserver testuser testwww thomas tidb tim tmpuser tony trade ts ts2 tunnel tyson u1 ubadmin ubnt UBUNTU ubuntu uftp uno85 User user user01 user03 user1 user11 user12 user13 user2 user4 user6 user7 user8 user_jenkins username username1 usertest usher usman vbox victor vincent vintagestory virginia vncuser vpn vpnuser vpsuser vscode vyos wang wcs web-admin webadmin weblogic webtest web-user webuser whmcs wialon wiki will windows winter wj work wpuser ws xg xh xiangyu xiaoming xx xxx yang yaraque yoyo zabbix zcm zero zhangsan zhangwei zhihong zjw zyx