techduck sharing the noise
see Disclaimer and Terms of Service. For complete long lines use the index.txt.
Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box.. added a list of unique usernames from dictionary attacks.
Tuesday October 7, 2025

denied by configuration:

 1.95.40.188 (ecs-1-95-40-188.compute.hwclouds-dns.com): 4 Times
 2.57.121.25 (hosting25.tronicsat.com): 18 Times
 2.57.121.112 (dns112.personaliseplus.com): 33 Times
 5.195.226.17: 10 Times
 8.154.0.67: 5 Times
 14.48.24.90: 2 Times
 14.103.84.166: 1 Time
 14.103.107.93: 4 Times
 14.103.112.243: 6 Times
 14.103.120.130: 5 Times
 14.103.162.75: 11 Times
 14.103.168.32: 9 Times
 14.225.220.107 (static.vnpt.vn): 5 Times
 14.225.253.26: 5 Times
 20.185.243.158: 5 Times
 23.94.67.178 (23-94-67-178-host.colocrossing.com): 4 Times
 23.185.200.4: 5 Times
 27.38.133.83: 2 Times
 27.79.44.171 (localhost): 2 Times
 27.112.78.245 (ip27-112-78-245.cloudhost.web.id): 29 Times
 27.112.79.50 (ip27-112-79-50.cloudhost.web.id): 5 Times
 27.155.77.43: 5 Times
 31.7.68.18: 5 Times
 34.140.65.171 (171.65.140.34.bc.googleusercontent.com): 5 Times
 36.99.192.221: 5 Times
 36.111.156.204: 9 Times
 38.43.130.70 (38-43-130-70.nubyx.pe): 5 Times
 38.100.203.79 (mia-38-100-203-79.ip4.99.network): 5 Times
 39.105.37.102: 1 Time
 40.160.9.156: 5 Times
 41.93.28.23 (portal.ternet.or.tz): 5 Times
 41.111.162.34: 10 Times
 42.194.164.182: 14 Times
 42.194.202.218: 3 Times
 43.134.107.92: 8 Times
 43.138.212.13: 7 Times
 43.225.158.4: 5 Times
 43.225.158.169: 5 Times
 43.242.247.141: 5 Times
 45.78.196.209: 5 Times
 45.94.31.18 (tor01-ams1.rdp.sh): 5 Times
 45.95.214.163 (hostinode.com): 5 Times
 45.134.26.79: 25 Times
 45.135.232.92: 13 Times
 45.135.232.177: 24 Times
 46.163.199.8 (46-163-199-8.blcnet.fi): 5 Times
 47.237.119.139: 1 Time
 49.64.169.153: 5 Times
 49.72.212.22: 6 Times
 49.207.240.113 (broadband.actcorp.in): 5 Times
 49.228.100.184 (49-228-100-0.24.nat.cwdc-cgn02.myaisfibre.com): 4 Times
 49.229.72.68: 1 Time
 49.234.23.207: 12 Times
 51.38.129.85 (vps-7242eaeb.vps.ovh.net): 5 Times
 51.159.54.22 (51-159-54-22.rev.poneytelecom.eu): 5 Times
 54.38.190.246 (vps-3d2e1516.vps.ovh.net): 5 Times
 59.98.83.57: 5 Times
 62.60.131.157: 16 Times
 62.193.106.227: 5 Times
 63.116.23.24 (host24.helenandrews.com): 5 Times
 64.62.197.139 (scan-48c.shadowserver.org): 1 Time
 64.225.55.168: 5 Times
 64.226.103.55: 4 Times
 65.109.4.113 (static.113.4.109.65.clients.your-server.de): 5 Times
 67.188.205.117 (c-67-188-205-117.hsd1.ca.comcast.net): 8 Times
 75.139.146.199 (syn-075-139-146-199.res.spectrum.com): 4 Times
 78.10.232.82 (78-10-232-82.static.ip.netia.com.pl): 5 Times
 81.0.221.64 (vmi2780486.contaboserver.net): 25 Times
 87.106.169.89: 5 Times
 91.98.77.254 (static.254.77.98.91.clients.your-server.de): 5 Times
 92.191.96.115 (115.96.191.92.dynamic.jazztel.es): 5 Times
 92.222.23.164 (vps-1fd01736.vps.ovh.net): 5 Times
 92.251.3.232 (c3-232.i07-1.onvol.net): 5 Times
 94.182.174.254 (94-182-174-254.shatel.ir): 2 Times
 94.249.151.147: 5 Times
 94.254.0.234 (h-94-254-0-234.na.cust.bahnhof.se): 5 Times
 95.217.186.113 (static.113.186.217.95.clients.your-server.de): 5 Times
 101.126.55.95: 3 Times
 101.126.81.18: 6 Times
 101.126.88.79: 15 Times
 101.133.235.172: 1 Time
 103.41.98.69 (static-103-41-98-69.pol.net.in): 5 Times
 103.52.37.10: 5 Times
 103.63.25.115 (ip103-63-25-115.cloudhost.web.id): 4 Times
 103.67.78.102 (ip103-67-78-102.cloudhost.web.id): 4 Times
 103.100.208.88: 5 Times
 103.142.69.89: 5 Times
 103.148.100.146: 5 Times
 103.171.84.81 (ip103-171-84-81.cloudhost.web.id): 5 Times
 103.183.74.130 (ip103-183-74-130.cloudhost.web.id): 5 Times
 103.226.138.41 (ip103-226-138-41.cloudhost.web.id): 5 Times
 103.250.11.235 (ip103-250-11-235.cloudhost.web.id): 5 Times
 106.0.4.233: 11 Times
 106.13.7.239: 1 Time
 106.13.64.124: 7 Times
 106.13.183.192: 37 Times
 106.55.52.106: 2 Times
 106.55.197.193: 19 Times
 107.170.228.16 (wfinancial20230805-s-1vcpu-2gb-sfo1-01-ubuntu-16.04): 5 Times
 107.172.62.239 (107-172-62-239-host.colocrossing.com): 5 Times
 107.175.54.2 (107-175-54-2-host.colocrossing.com): 5 Times
 107.175.209.171 (sistema03.sistemasecurity.info): 5 Times
 107.175.209.254 (107-175-209-254-host.colocrossing.com): 5 Times
 109.248.11.184 (715766.cloud4box.ru): 3 Times
 110.93.250.15: 5 Times
 111.2.190.115: 3 Times
 113.164.66.10 (static.vnpt.vn): 5 Times
 114.216.4.149: 5 Times
 115.190.73.63: 5 Times
 115.190.87.71: 29 Times
 116.1.149.196: 3 Times
 116.110.151.5: 4 Times
 116.202.103.166 (static.166.103.202.116.clients.your-server.de): 5 Times
 117.50.120.215: 16 Times
 117.72.68.94: 8 Times
 117.72.113.184: 23 Times
 117.72.122.13: 19 Times
 118.26.38.195: 5 Times
 118.107.206.116: 5 Times
 118.145.209.54: 8 Times
 118.145.212.127: 6 Times
 118.194.230.231 (vinfeshop.com): 2 Times
 118.195.144.156: 1 Time
 119.45.143.159: 2 Times
 119.147.84.200: 4 Times
 120.48.39.224: 4 Times
 120.48.55.126: 8 Times
 120.48.98.125: 4 Times
 120.131.12.238: 15 Times
 121.5.33.242: 6 Times
 121.41.179.144: 1 Time
 121.136.87.130: 1 Time
 122.9.146.24 (ecs-122-9-146-24.compute.hwclouds-dns.com): 4 Times
 122.51.131.143: 23 Times
 122.155.223.9: 5 Times
 122.192.197.42: 4 Times
 123.58.16.244: 19 Times
 123.59.28.66: 6 Times
 124.105.188.38: 13 Times
 124.220.53.92: 16 Times
 125.119.124.251: 3 Times
 125.124.42.183: 5 Times
 130.107.240.11: 5 Times
 130.185.122.105: 5 Times
 134.199.196.76: 1 Time
 134.199.201.164: 1 Time
 134.199.206.46: 1 Time
 136.144.183.228 (136-144-183-228.colo.transip.net): 5 Times
 137.184.97.100: 5 Times
 137.184.145.163: 5 Times
 140.246.80.125: 4 Times
 142.44.247.87 (mail.versume.ai): 5 Times
 150.241.113.46: 22 Times
 151.44.162.180 (adsl-ull-180-162.44-151.wind.it): 5 Times
 152.32.172.161: 5 Times
 152.32.239.90: 4 Times
 154.72.233.36: 5 Times
 154.221.19.162: 5 Times
 154.221.29.120: 5 Times
 156.0.130.2: 1 Time
 156.0.130.3: 1 Time
 156.0.130.4: 2 Times
 156.0.130.5: 1 Time
 156.0.130.43: 1 Time
 156.0.130.59: 2 Times
 156.0.130.60: 1 Time
 156.0.130.62: 1 Time
 156.0.130.79: 1 Time
 156.0.130.84: 2 Times
 156.0.130.85: 1 Time
 156.0.130.89: 2 Times
 156.0.130.93: 2 Times
 156.0.130.98: 2 Times
 156.0.130.101: 1 Time
 156.0.130.103: 1 Time
 156.0.130.104: 1 Time
 156.0.130.106: 1 Time
 156.0.130.112: 1 Time
 156.0.130.113: 1 Time
 156.0.130.115: 2 Times
 156.0.130.119: 1 Time
 156.0.130.124: 1 Time
 158.51.124.122 (158.51.124.122.hostodo.com): 1 Time
 158.173.2.8: 5 Times
 159.75.172.79: 6 Times
 161.34.66.72 (161-34-66-72.indigo.static.arena.ne.jp): 17 Times
 161.35.75.39: 5 Times
 161.132.53.248: 5 Times
 167.99.131.158: 3 Times
 170.238.160.191: 5 Times
 171.244.141.177: 5 Times
 172.86.122.52 (52.122.86.172.static.cloudzy.com): 5 Times
 172.105.102.10 (prod08.academyforinternetresearch.org): 1 Time
 172.208.52.110: 5 Times
 172.245.45.194 (172-245-45-194-host.colocrossing.com): 5 Times
 173.224.125.126 (usvds6000x47.startdedicated.com): 5 Times
 177.84.218.98 (177.84.218.98.provedorlmtelecom.com.br): 5 Times
 180.76.238.59: 4 Times
 184.181.74.4 (wsip-184-181-74-4.dc.dc.cox.net): 2 Times
 185.158.23.150: 5 Times
 185.194.205.96 (darkvpn.shop): 5 Times
 185.213.175.140: 5 Times
 185.255.91.51 (static.51.91.255.185.clients.irandns.com): 5 Times
 186.31.95.163 (static-186-31-95-163.static.etb.net.co): 5 Times
 187.16.96.250 (mvx-187-16-96-250.mundivox.com): 14 Times
 187.120.46.25 (hosts-187-120-46-25.iz1telecom.com.br): 5 Times
 190.12.108.68 (static.68.108.12.190.cps.com.ar): 5 Times
 190.119.198.81: 4 Times
 192.169.89.69 (69-89-169-192.static.reverse.lstn.net): 5 Times
 194.87.187.47: 5 Times
 194.191.251.60 (60-251-191-194.pool.dsl-net.ch): 5 Times
 194.233.74.228 (vmi2789836.contaboserver.net): 5 Times
 194.233.95.54 (m28957.contaboserver.net): 3 Times
 195.178.110.133: 11 Times
 196.251.71.210: 5 Times
 196.251.73.199: 3 Times
 196.251.84.140: 79 Times
 198.11.183.112: 1 Time
 198.12.77.137 (198-12-77-137-host.colocrossing.com): 5 Times
 200.73.135.75 (75.135.73.200.cab.prima.net.ar): 5 Times
 200.189.192.3 (spo.dts.gemalto.com.br): 18 Times
 201.71.235.30 (30-235-71-201.vipway.net.br): 2 Times
 203.25.208.110: 5 Times
 203.83.231.93: 4 Times
 209.97.175.108: 5 Times
 209.141.33.240 (saphira.pwnation.net): 5 Times
 209.141.47.6 (byvmlv-2gb.pinoyserver.com): 5 Times
 210.79.190.46 (ip210-79-190-46.cloudhost.web.id): 5 Times
 210.114.22.126: 20 Times
 213.169.44.220: 2 Times
 213.209.157.27: 15 Times
 213.209.157.34: 11 Times
 213.209.157.36: 16 Times
 213.209.157.45: 16 Times
 213.209.157.47: 25 Times
 213.209.157.49: 18 Times
 213.209.157.53: 16 Times
 213.209.157.55: 14 Times
 213.209.157.57: 18 Times
 213.209.157.84: 14 Times
 213.209.157.193: 14 Times
 213.209.157.199: 18 Times
 216.133.149.131: 5 Times
 218.78.132.164: 5 Times
 219.150.93.157: 5 Times
 221.213.129.46: 5 Times
 222.73.48.210: 10 Times
 223.17.0.220 (220-0-17-223-on-nets.com): 5 Times

system login attempted:

 nobody : 1 Time
 root : 316 Times
 uucp : 2 Times

received disconnect:

  [preauth] : 136 Times
 Bye Bye [preauth] : 889 Times
 Bye [preauth] : 71 Times
 error: Protocol major versions differ: 2 vs. 1 : 3 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 12 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" : 1 Time
 error: kex_exchange_identification: read: Connection reset by peer : 37 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 4 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 4 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 4 Times

dictionary attacks: 469 unique usernames.

 a aaPower abc acc acfun adm admin Admin1 admin1 admin3 administrator
 adminuser agiraldj ahmed airflow akbar alara alex ali alin aluno amir
 ankur ansible app appadmin ar arkserver asgbrasil ashok auroraofsc
 automation avid backenderm baikal barsha belafitacombr benfeng bfkyh
 binux bitrix bitwarden blog bo bogdan boris bot botuser byuan caoyong
 caoyunhua carshowguide casaos catalyn catheryn cdn centos changs chdmc
 chenjq chensiyu chenzhang cherise christan cin Cisco clairissa client
 code87 comercial config confluence connect corrinne cortnee cpss CSG
 cssserver cwenhong cyanne daeryukhkang dalaney damiana danaja daniel
 david db2inst1 deajah debian deelip degen Demo demo demya deploy
 deployer derica derrica derrickml devops devopsuser devuser digital
 director disk3 dixi dmdba do dockeruser dongguande dot draytek drupal
 dwo dylan dyzhu eagle ec2-user edi elasticsearch emcali eric erpnext es
 escheduler felix fengwenfei fivem flink forest forge frappe freshlogs
 ftptest fty19 gaozhiwei giorgio Git git github gitlab-runner git_zlgl
 glzjind golfgetaway groot guanweibo Guest guest guest-sjuic6 guest-yznod7
 guo guoyichen guyuefeng gx h hadoop harsh harshit helpdesk hepeng heyao
 hsadmin htong hu huang huangmengqi huangpu huawei huxiongya huying igor
 images info install installer instrument intel irina isp it jason1 jason3
 jboss jcifuentes jenkins jinshuaiyu jnys john k kafka kali kawaguchi
 kelvin kibana kiosk kodi kubeadmin kyivstar lab larry lawrence lemon
 liangjun lili liruizhen lisa liy liyuqing lizhi ljchen llm loutsx lpadmin
 luis luke lxg maarch magasin maint mama mamy manager marietta master MC
 mc mcserver me meza mhjiang minecraft minikube mininet mishra mitra mlt
 mo monitor mostafa mpiuser mtest mtt musa mxt mysql myuser nadiaj natasha
 necho neeraj netscreen network3 newuser newusername nextcloud nexus nginx
 niurui njfu001a node_exporter (none) nwy nx odoo odoo11 odoo15 odoo17
 onlime_r openpose operator oracle p100 paco panda papri patricia pepe pi
 ping pinghuazhang pivpn piyifei PlcmSpIp PLMIMService postgres prepose
 project1 prowlarr proxyuser PRUEBA puqianyu qianmengyuan qihang qsecofr
 qui qvceb qwerty r00t rabbitmq radio radius ravi reelforge registry
 remote remoto rene researchpc reza rita rizki rmsadm rock rocky roman
 ronald root2015 root2016 root2017 root2018 root2019 root2020 root2021
 root2022 root2023 root2024 royal runner rustserver rxc rz sadmin sajid
 sally samba sammy scan scanner server setpriv setup sftpuser shangzhanlu
 shgec shidantong shiguan shixue shli sims site3010 sjzb slurm sol
 solana solv soporte sopuser spark ssh sshuser ssjin stack staging steam
 stu2016080074 student sunshuai sunyue super superuser support suyuwen svn
 sxia sysadm sysadmin szy t2 t7inst talish teamspeak teamspeak3 telefony
 temp tempuser TEST test test01 test1 teste tester testuser tibco tmp1
 tomas tomcatuser ts ts3 ts3server ttt tw ubnt ubuntu upload4 user user01
 user1 user123 user15 user2 username uuidd vagrant validator vas vcd
 vei video vncuser vpn vr wangziyun wartung wayyen web webapp webhost
 weblogic webshield west wqmarlduiqkmgs wsy www wwwroot wyl wzh wzku xew
 xgy xiang xieben xtribextest xtzhang xushiyuan xx xzhao yaowp yby yfxu
 ygu ygy yjc ymLiu_Wang yq yuan yw-admin zdd zf zhangshuai zhangzhiyuan
 zhaorq zhaoshij zhengfang zheshen zhihong zhuangzy ziguang zkx zxj
 

By using this site you agree to accept the Terms Of Service and Disclaimer. CONTACT: info at techduck.ca