techduck sharing the noise
see Disclaimer and Terms of Service. For complete long lines use the index.txt.
Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box.. added a list of unique usernames from dictionary attacks.
Thursday March 13, 2025

denied by configuration:

 2.57.122.189: 2 Times
 8.221.139.48: 1 Time
 14.103.93.44: 5 Times
 14.225.217.156: 5 Times
 14.246.5.32 (static.vnpt.vn): 2 Times
 20.240.241.205: 13 Times
 27.254.192.185: 3 Times
 34.100.211.26 (26.211.100.34.bc.googleusercontent.com): 4 Times
 35.198.197.145 (145.197.198.35.bc.googleusercontent.com): 15 Times
 35.199.95.142 (142.95.199.35.bc.googleusercontent.com): 3 Times
 37.58.18.237: 2 Times
 41.242.142.196: 1 Time
 49.65.99.175: 2 Times
 58.34.189.26: 2 Times
 62.146.182.115 (vmi2249527.contaboserver.net): 5 Times
 64.225.57.172: 46 Times
 65.49.1.85 (scan-57f.shadowserver.org): 1 Time
 80.64.30.77: 56 Times
 80.94.95.112: 15 Times
 92.118.39.73: 10 Times
 92.255.85.37: 51 Times
 92.255.85.107: 54 Times
 92.255.85.188: 6 Times
 92.255.85.189: 9 Times
 92.255.85.253: 31 Times
 93.126.53.41 (e1server.41.53.126.93.in-addr.arpa): 5 Times
 101.133.139.74: 1 Time
 103.179.57.227 (ip103-179-57-227.cloudhost.web.id): 2 Times
 106.12.153.108: 4 Times
 106.13.29.146: 3 Times
 106.75.164.20: 5 Times
 111.173.89.134: 3 Times
 113.125.169.23: 3 Times
 114.143.225.62 (static-62.225.143.114-tataidc.co.in): 4 Times
 116.98.160.39 (dynamic-ip-adsl.viettel.vn): 4 Times
 116.98.162.80 (dynamic-ip-adsl.viettel.vn): 4 Times
 116.105.212.175: 2 Times
 116.110.15.103: 5 Times
 116.110.94.176: 3 Times
 117.114.194.46: 10 Times
 117.114.194.180: 1 Time
 120.48.98.125: 2 Times
 122.96.151.110: 19 Times
 128.199.168.119: 1 Time
 134.199.172.22: 20 Times
 137.184.116.43: 28 Times
 137.184.175.161: 6 Times
 138.68.154.149: 29 Times
 140.246.115.234: 2 Times
 142.93.141.134: 7 Times
 143.244.173.243: 32 Times
 146.190.22.40 (academy.smarttourisme.net): 14 Times
 146.190.243.38: 51 Times
 146.190.249.78: 2 Times
 156.229.233.193: 19 Times
 159.203.10.39: 6 Times
 162.215.133.102 (7022851.akhbm.com): 8 Times
 164.90.150.6: 10 Times
 164.92.125.87: 27 Times
 167.71.163.147: 4 Times
 170.64.193.147: 1 Time
 170.64.233.22: 1 Time
 170.64.239.69: 1 Time
 172.105.18.94 (172-105-18-94.ip.linodeusercontent.com): 1 Time
 174.138.20.245: 4 Times
 178.62.47.178: 2 Times
 188.166.102.35: 3 Times
 188.166.226.129: 32 Times
 193.32.162.136: 2 Times
 194.0.234.35: 7 Times
 194.0.234.36: 6 Times
 195.93.152.204: 5 Times
 196.251.88.103: 3 Times
 202.120.31.152: 4 Times
 206.189.115.177: 38 Times
 209.38.47.150: 1 Time
 209.38.155.167: 26 Times
 218.241.139.123: 1 Time

system login attempted:

 sshd : 2 Times
 daemon : 2 Times
 root : 823 Times
 uucp : 1 Time

received disconnect:

  [preauth] : 276 Times
 Bye Bye [preauth] : 243 Times
 Bye [preauth] : 19 Times
 Disconnected from invalid user  80.94.95.112 port 19607 [preauth] : 1 Time
 Disconnected from invalid user  80.94.95.112 port 32579 [preauth] : 1 Time
 Disconnected from invalid user  80.94.95.112 port 43567 [preauth] : 1 Time
 Disconnected from invalid user  80.94.95.112 port 45629 [preauth] : 1 Time
 Disconnected from invalid user  80.94.95.112 port 46710 [preauth] : 1 Time
 Disconnected from invalid user  80.94.95.112 port 7225 [preauth] : 1 Time
 drop connection #10 from [202.120.31.152]:44050 past MaxStartups : 1 Time
 error: Protocol major versions differ: 2 vs. 1 : 2 Times
 error: beginning MaxStartups throttling : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 1 Time
 error: kex_exchange_identification: read: Connection reset by peer : 17 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 7 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 7 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 7 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 7 Times
 exited MaxStartups throttling after 00:01:22, 1 connections dropped : 1 Time
 fatal: userauth_finish: send failure packet: Connection reset by peer [preauth] : 2 Times

dictionary attacks: 357 unique usernames.

 0 000000 1 1003 11111 1234 12345 1broker a a1 a3user aadmin
 aadministrator aave abdul abel acd activity_analyzer ad1tz adam adewale
 adm Admin admin adminagora administrador Administrator administrator ADSL
 aleo allbit ambari-qa ana anil anonymous ansible ansibleuser ant anyuser
 app appadmin appserver appuser arbitrage arch ark arkserver asterisk
 atlas audit aurox axis azure azureuser bad bancor bitbuy bitcoiva
 bitgrail bitking bitpanda bitz blockchain blockchain.com bnkto bot
 bridgedex btc btc1 btcc camera centos chainx changelly chat chris cisco
 cloudoa clover cmsuser code coin coindirect coinex coinflect coinhub
 coinjar coinlore coinroute comcard composer computer config console
 contact contador content coss cron crowley crypto cryptomarket cryptopia
 cs2 cs2server csap1 css ctpsp ctpspb cuilinghe cupidadmin cvsroot
 daiguantao damien daniele dao daoperator database databse datou david
 Dawn db db2das db2fenc db2fenc2 db2inst2 dbadmin dbuser dcnpro default
 degen delegate demo dev devicehaecived directcoin dispatch-sjjr.keytab
 docker dogecoin easycrypto eddie elastic eldercarrizalez elysium empfang
 es eth ether Ethereum ethereum ethereumdocker etluser export fgh filecoin
 fire flexacoin flowdesk freshlogs ftp ftpuser gabriel git glidera gpadmin
 guest gwei hall hdfs hduser helena homework hotbit hubble iie infra
 installer internet jade jenkins kafka kaiser kas kbvug kelvin kibana
 koinim kong kvm lab letter lili liquidator liquid.com liquidity lite
 litenode litnode liuchun livy loan loginuser lotus makerdao manager massa
 masternodes maxadmin mcserver meshbit mikaela minecraft monitor muangagu
 music mxintadm mysql nadia namada network3 newuser nginx NL5xUDpV2xRa
 nmt node nodeoperator (none) NSA nsrecover ntsserverclient ociispth
 octafx oleg olm oozie openhabian openvswitch operator oracle pancake
 pepino personal phantom pi pion plcmspip polkadex Polkadot polkadot
 pos postfix postgres postmaster prakash print ps PUBLIC public pzuser
 quadency qudex qwerty rabbitmq redmine remitano remote ricardo !root
 roott rstp sa samsung saqib satoshibox scan scanner secure security
 server SG350X sns software sol solana sonos spam spark splunk squid ss7
 sshadmin stakingrewards status storm story stp superv support susan sushi
 sysadmin .syslog system teamspeak3 telecomadmin telegram telegramapi
 telnet test test11 teste TestUser testuser tez tfsc tim titanex tomcat
 trade-bot trade.bot tradebot training ts ts2 ubnt ubuntu uniswap user
 user2 username usr vagrant validate validator video videsk vinod viper
 vpn VYOS Vyos vyos wa1.keytab wasadmin web3 weblogic wp wwdbo wwUser
 xenaex xray yarn-ats yufeisong yvonne Zabbix zimbra
 

By using this site you agree to accept the Terms Of Service and Disclaimer. CONTACT: info at techduck.ca