techduck sharing the noise
see Disclaimer and Terms of Service. For complete long lines use the index.txt.
Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box.. added a list of unique usernames from dictionary attacks.
Thursday May 28, 2026

denied by configuration:

 2.57.121.25 (hosting25.tronicsat.com): 18 Times
 2.57.121.112 (dns112.personaliseplus.com): 13 Times
 2.57.122.238: 5 Times
 14.29.198.130: 3 Times
 14.63.196.175: 2 Times
 14.103.112.5: 7 Times
 14.103.115.213: 7 Times
 14.103.118.61: 3 Times
 18.97.19.236 (scanner-18-97-19-236.reposify.net): 1 Time
 20.6.35.235: 7 Times
 20.203.42.204: 11 Times
 27.79.1.172 (localhost): 3 Times
 27.79.2.162 (localhost): 4 Times
 27.79.3.91 (localhost): 4 Times
 31.41.152.180: 1 Time
 34.14.67.193 (193.67.14.34.bc.googleusercontent.com): 1 Time
 36.104.147.6: 4 Times
 36.138.252.97: 1 Time
 36.212.227.224: 3 Times
 39.115.195.164: 2 Times
 43.112.68.63: 11 Times
 43.139.23.180: 2 Times
 43.165.174.224: 3 Times
 43.173.69.147: 3 Times
 45.4.179.3: 3 Times
 45.119.212.99: 11 Times
 45.120.216.232: 4 Times
 45.148.10.121: 14 Times
 45.196.236.141: 5 Times
 46.165.56.242: 3 Times
 46.225.149.43 (static.43.149.225.46.clients.your-server.de): 1 Time
 47.254.192.213: 1 Time
 49.64.85.138: 4 Times
 50.116.106.59 (fin.finewebsiteshosting.com): 6 Times
 51.158.120.121 (121-120-158-51.instances.scw.cloud): 2 Times
 59.126.224.134 (59-126-224-134.hinet-ip.hinet.net): 3 Times
 65.49.1.184 (scan-74-02.shadowserver.org): 1 Time
 66.116.225.113 (server.gharstuff.com): 3 Times
 67.205.189.163: 3 Times
 70.54.182.130 (ipagstaticip-0e05dd42-0a3b-c881-e51c-fdd5f9e43762.sdsl.bell.ca): 5 Times
 74.87.117.149 (syn-074-087-117-149.biz.spectrum.com): 15 Times
 74.115.172.118 (74-115-172-118.static.hvvc.us): 2 Times
 77.85.197.6 (77-85-197-6.ip.btc-net.bg): 9 Times
 80.94.92.171: 4 Times
 80.94.92.182: 37 Times
 80.241.210.247 (server.cpmeeting.com): 2 Times
 81.28.167.30: 4 Times
 81.193.159.166 (bl4-159-166.dsl.telepac.pt): 7 Times
 82.152.132.24: 2 Times
 92.191.96.70 (70.96.191.92.dynamic.jazztel.es): 4 Times
 94.183.235.102: 9 Times
 95.167.225.76: 3 Times
 95.182.82.132: 4 Times
 98.70.57.151: 4 Times
 101.47.159.125: 3 Times
 103.82.21.8: 4 Times
 103.91.208.101: 2 Times
 103.151.140.79: 9 Times
 103.158.29.100: 5 Times
 103.189.208.13: 3 Times
 103.248.120.6: 3 Times
 105.96.13.6: 3 Times
 107.170.1.44: 1 Time
 109.194.108.203 (staticip-109x194x108x203.pppoe.yola.ertelecom.ru): 3 Times
 114.111.52.109: 4 Times
 115.241.83.2: 9 Times
 117.50.51.198: 3 Times
 122.13.25.186: 1 Time
 124.109.2.211: 8 Times
 128.199.231.249: 8 Times
 139.19.117.129 (inet-research-scan-5.mpi-inf.mpg.de): 17 Times
 151.242.30.119: 9 Times
 152.32.214.226: 10 Times
 154.241.55.43: 1 Time
 155.4.244.179 (h-155-4-244-179.NA.cust.bahnhof.se): 3 Times
 155.4.245.222 (h-155-4-245-222.NA.cust.bahnhof.se): 5 Times
 156.245.246.50: 14 Times
 157.7.113.83 (v157-7-113-83.9jgj.static.cnode.io): 3 Times
 159.69.6.143 (143.6.69.159.foreign.iaas.derak.cloud): 3 Times
 159.89.121.195: 1 Time
 163.245.221.126 (vps3315133.trouble-free.net): 2 Times
 165.154.6.86: 4 Times
 165.154.14.96: 12 Times
 171.231.183.169 (dynamic-ip-adsl.viettel.vn): 3 Times
 171.243.149.250 (dynamic-ip-adsl.viettel.vn): 4 Times
 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time
 177.36.214.46 (customer-177-36-214-46.conectv.com.br): 4 Times
 177.229.197.38 (customer-MCA-TGZ-197-38.megared.net.mx): 3 Times
 180.76.177.88: 2 Times
 180.76.184.79: 1 Time
 181.51.189.171 (static-ip-181510189171.cable.net.co): 3 Times
 182.93.50.90 (n18293z50l90.static.ctmip.net): 3 Times
 183.91.186.36: 2 Times
 184.168.21.211 (211.21.168.184.host.secureserver.net): 2 Times
 185.246.128.171: 3 Times
 186.104.210.46 (186-104-210-46.fo.baf.movistar.cl): 3 Times
 189.147.19.238 (dsl-238-19-147-189-dynamic.prod-infinitum.com.mx): 2 Times
 189.203.163.10 (fixed-189-203-163-10.totalplay.net): 3 Times
 190.220.172.154: 8 Times
 193.46.255.86: 5 Times
 197.140.18.248: 4 Times
 197.227.14.33: 6 Times
 203.228.30.198: 7 Times
 209.14.89.107 (gru-209-14-89-107.ip4.99.network): 4 Times
 209.99.189.177: 2 Times
 212.51.34.150 (150.34.51.212.dynamic.reverse-mundo-r.com): 3 Times
 213.177.179.79: 1 Time
 213.209.159.56: 9 Times
 217.154.42.110 (ip217.154.42-110.pbiaas.com): 8 Times

system login attempted:

 daemon : 1 Time
 root : 670 Times

received disconnect:

 Bye Bye [preauth] : 697 Times
 Bye [preauth] : 45 Times
 disconnected by user [preauth] : 182 Times
 Disconnected from invalid user  193.46.255.86 port 25257 [preauth] : 1 Time
 Disconnected from invalid user  193.46.255.86 port 34506 [preauth] : 1 Time
 error: Protocol major versions differ: 2 vs. 1 : 2 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 5 Times
 error: kex_exchange_identification: read: Connection reset by peer : 21 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 4 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 4 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 4 Times

dictionary attacks: 220 unique usernames.

 0 3d adam admin admin1 AdminGPON administrador administrator adnan agotoz
 alice alina anakin ansible app appadmin arjun assistant automation
 bash belkinstyle boss bpadmin brian budda builduser cam carlos chris
 cisco cloud config daniel data dave default deleteme deploy deployer
 desliga dev developer django drcom dspace ec2-user elasticsearch elk
 elsearch elton ernesto erpnext erpuser esther es_user eun extern exx
 firedancer foundry frappe freelancer ftp_client ftpd ftptest ftpUser
 ftp_user ftpuser gemini git gitlab-runner gpadmin grid harsh hasan
 hdfs himanshu httpd innova installer intell ir ircd ironman james
 java javier jenkins jibs jihad joi josey kafka kai kamari kim koha
 kubernetes leon leonard lg liferay lilei linuxacademy lorena manoj
 marco mariadb markayla matlab max mcserver media min minecraft minima
 mocvf mohsen monitor mrodelo msf mysql netflow newuser noc node (none)
 odoo15 office olivier omar omm opadmin openkm operation ops oracle
 pal pbsworks pgadmin pick pos postgres praveen prod prova pruebas ps
 psadmin quentin raul raydium relay rf rizky roberto roman root1 saad
 sam scanner sergey server sfc sg share sherry shiloh shreya sinusbot
 smart socksuser sol solana solv sonar sonu soporte squid sshuser steam
 steve stp student support syncthing sysadm sysadmin sysuser teamspeak
 telecomadmin test test1 testadmin testuser thomas tibero tom ts3 ttc
 ttt ubnt ubuntu unix user user1 useradmin username valera validator
 vbox vps webmaster wei whatsapp work zcm zhangsan zhou zsolt
 

By using this site you agree to accept the Terms Of Service and Disclaimer. CONTACT: info at techduck.ca