techduck
sharing the noise
see Disclaimer and Terms of Service.
For complete long lines use the index.txt.
Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.. added a
list of unique usernames from dictionary attacks.
Monday November 24, 2025
denied by configuration:
2.57.121.25 (hosting25.tronicsat.com): 17 Times
2.57.121.112 (dns112.personaliseplus.com): 27 Times
4.194.4.255: 3 Times
12.156.67.18: 8 Times
12.219.100.164: 1 Time
14.34.157.138: 2 Times
14.103.116.87: 3 Times
14.103.118.136: 2 Times
14.103.139.5: 2 Times
14.103.156.206: 3 Times
14.103.168.32: 6 Times
14.103.173.90: 3 Times
14.103.232.46: 5 Times
14.103.247.214: 3 Times
20.212.241.39: 4 Times
20.253.214.172: 7 Times
27.79.44.141 (localhost): 4 Times
27.150.188.148: 4 Times
27.254.137.144: 1 Time
31.59.58.42 (mail.drm.it.com): 4 Times
34.91.0.68 (68.0.91.34.bc.googleusercontent.com): 3 Times
35.240.75.51 (51.75.240.35.bc.googleusercontent.com): 4 Times
36.103.222.120: 4 Times
36.104.144.114: 2 Times
38.47.90.244: 4 Times
41.80.35.45: 2 Times
41.211.101.165 (host-165-101-211.iccnet.cm): 4 Times
42.51.32.228: 4 Times
42.200.78.78 (42-200-78-78.static.imsbiz.com): 2 Times
43.133.219.68: 3 Times
43.155.21.198: 3 Times
45.78.194.32: 4 Times
45.78.194.58: 19 Times
45.78.194.142: 11 Times
45.78.194.246: 13 Times
45.78.201.60: 10 Times
45.78.203.65: 4 Times
45.78.203.166: 12 Times
45.78.206.84: 10 Times
45.78.206.115: 10 Times
45.78.206.159: 14 Times
45.78.207.126: 12 Times
45.78.216.178: 3 Times
45.78.216.189: 16 Times
45.78.217.1: 11 Times
45.78.217.24: 11 Times
45.78.217.65: 7 Times
45.78.217.67: 7 Times
45.78.217.95: 9 Times
45.78.217.136: 14 Times
45.78.217.213: 12 Times
45.78.218.148: 8 Times
45.78.219.86: 12 Times
45.78.219.136: 16 Times
45.78.219.137: 2 Times
45.78.219.216: 10 Times
45.78.220.149: 11 Times
45.78.222.146: 2 Times
45.78.222.249: 11 Times
45.78.227.29: 13 Times
45.78.227.142: 13 Times
45.78.229.147: 12 Times
45.130.148.125: 5 Times
45.135.232.92: 14 Times
45.140.17.124: 30 Times
46.24.32.116 (static-116-32-24-46.ipcom.comunitel.net): 10 Times
46.101.1.180: 4 Times
51.178.141.222 (vps-222a9171.vps.ovh.net): 5 Times
58.220.24.66: 1 Time
58.222.244.226: 6 Times
61.220.235.10 (61-220-235-10.hinet-ip.hinet.net): 4 Times
62.60.131.157: 19 Times
62.173.38.229 (62-173-38-229.rv.ipnxtelecoms.com): 3 Times
64.62.197.161 (scan-41j.shadowserver.org): 1 Time
64.227.44.227: 2 Times
64.227.135.37: 4 Times
68.183.236.1: 3 Times
69.156.93.102 (bras-base-toroon6126w-grc-16-69-156-93-102.dsl.bell.ca): 5 Times
70.54.182.130 (ipagstaticip-0e05dd42-0a3b-c881-e51c-fdd5f9e43762.sdsl.bell.ca): 4 Times
74.249.246.151: 4 Times
78.128.112.74 (ip-112-74.4vendeta.com): 18 Times
79.168.139.28 (a79-168-139-28.cpe.netcabo.pt): 4 Times
80.94.92.166: 5 Times
80.94.92.182: 4 Times
80.94.92.186: 8 Times
80.94.95.115: 12 Times
80.94.95.116: 23 Times
81.26.205.105 (ip-81-26-205-105.digicom-al.net): 1 Time
82.65.121.222 (82-65-121-222.subs.proxad.net): 5 Times
86.107.77.201: 5 Times
89.255.244.238: 1 Time
92.118.39.95: 23 Times
101.47.48.72: 8 Times
101.47.140.73: 8 Times
101.47.162.91: 12 Times
101.47.163.125: 13 Times
103.25.47.94 (rainbowisp.in): 4 Times
103.69.129.95: 2 Times
103.107.187.9: 3 Times
103.146.202.174: 5 Times
103.176.78.28 (ip103-176-78-28.cloudhost.web.id): 4 Times
103.180.237.36: 1 Time
103.186.1.120 (ip103-186-1-120.cloudhost.web.id): 4 Times
103.217.145.154 (ip103-217-145-154.cloudhost.web.id): 3 Times
103.237.144.204: 1 Time
104.131.190.105: 10 Times
106.12.54.51: 1 Time
106.12.157.104: 1 Time
107.175.209.254 (107-175-209-254-host.colocrossing.com): 4 Times
112.175.125.117: 22 Times
113.164.66.10 (static.vnpt.vn): 3 Times
113.193.234.210: 4 Times
114.66.62.167: 7 Times
115.160.119.166: 2 Times
116.111.2.94: 4 Times
117.28.105.87 (87.105.28.117.broad.xm.fj.dynamic.163data.com.cn): 3 Times
119.203.251.187: 2 Times
121.142.87.218: 4 Times
121.229.9.97: 4 Times
122.155.223.9: 3 Times
132.145.213.106: 4 Times
135.148.138.189 (vpn.getfamous.org): 3 Times
138.248.168.20: 2 Times
143.110.186.36: 4 Times
143.110.241.64: 4 Times
152.32.130.118: 4 Times
152.32.145.111: 3 Times
152.32.203.205: 3 Times
152.32.238.146: 5 Times
152.42.165.179: 2 Times
154.70.102.114 (host-154.70.102.114.mtn.cm): 3 Times
157.10.253.188 (ip157-10-253-188.cloudhost.web.id): 3 Times
159.13.36.0: 9 Times
159.89.161.111: 4 Times
159.203.112.8: 3 Times
160.7.235.86: 4 Times
162.223.91.130 (ussrv.colopart.com): 5 Times
164.92.79.20: 4 Times
171.244.61.82: 3 Times
172.93.120.197 (mail.appendix.store): 1 Time
173.212.228.191 (ip-191-228-212-173.static.contabo.net): 5 Times
175.6.37.135: 4 Times
175.196.245.105: 3 Times
178.20.210.134 (hifalutin.banhkemcantho.com): 2 Times
178.128.147.10: 4 Times
178.128.173.108: 4 Times
179.33.210.213: 25 Times
180.76.98.88: 4 Times
180.101.226.115: 1 Time
180.243.252.136: 4 Times
181.116.220.11: 18 Times
181.188.172.6 (LPZ-181-188-172-00006.tigo.bo): 5 Times
185.156.73.233: 36 Times
185.194.199.46: 4 Times
187.45.95.66: 3 Times
187.45.100.0: 17 Times
187.110.238.50 (187.110.238.50.mobtelecom.com.br): 3 Times
188.37.131.134 (134.131.37.188.rev.vodafone.pt): 4 Times
188.81.57.130 (bl16-57-130.dsl.telepac.pt): 4 Times
188.128.39.179: 3 Times
190.129.122.12: 1 Time
192.210.133.26 (192-210-133-26-host.colocrossing.com): 1 Time
192.210.226.87 (192-210-226-87-host.colocrossing.com): 4 Times
193.32.162.146: 28 Times
193.32.162.151: 48 Times
193.134.101.52: 3 Times
194.9.26.194: 3 Times
194.190.153.226 (ib.systems): 2 Times
196.188.63.85: 2 Times
197.5.145.102: 3 Times
197.248.8.33 (197-248-8-33.safaricombusiness.co.ke): 5 Times
200.58.100.240 (vps-2293943-x.dattaweb.com): 4 Times
200.118.99.170 (dynamic-ip-cr20011899170.cable.net.co): 2 Times
201.249.192.30 (201-249-192-30.chc-00.rai.cantv.net): 4 Times
202.111.173.175: 1 Time
202.137.142.115: 4 Times
203.55.221.79: 3 Times
206.81.27.245: 11 Times
207.154.194.2: 4 Times
211.100.49.73: 3 Times
212.19.117.204 (scao.leonet.it): 4 Times
213.209.143.48: 5 Times
217.156.122.50: 3 Times
218.78.46.81: 1 Time
221.151.181.65: 3 Times
221.162.214.206: 2 Times
system login attempted:
sshd : 1 Time
backup : 2 Times
nobody : 2 Times
root : 585 Times
uucp : 1 Time
received disconnect:
[preauth] : 53 Times
Bye Bye [preauth] : 1221 Times
Bye [preauth] : 64 Times
Client disconnecting normally [preauth] : 2 Times
Disconnected from invalid user 2.57.121.112 port 62001 [preauth] : 1 Time
Disconnected from invalid user 2.57.121.112 port 62821 [preauth] : 1 Time
error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 6 Times
error: kex_exchange_identification: client sent invalid protocol identifier "GET /favicon.ico HTTP/1.1" : 1 Time
error: kex_exchange_identification: client sent invalid protocol identifier "\026\003\001\001" : 2 Times
error: kex_exchange_identification: read: Connection reset by peer : 27 Times
error: kex_protocol_error: type 20 seq 2 [preauth] : 2 Times
error: kex_protocol_error: type 20 seq 4 [preauth] : 2 Times
error: kex_protocol_error: type 20 seq 6 [preauth] : 2 Times
error: kex_protocol_error: type 30 seq 3 [preauth] : 2 Times
error: kex_protocol_error: type 30 seq 5 [preauth] : 2 Times
error: kex_protocol_error: type 30 seq 7 [preauth] : 2 Times
dictionary attacks: 377 unique usernames.
1 1111 1234 a aaa abc adam adm Admin admin admin1 admin123 AdminGPON
Administrator administrator aerohive afa ahmed airflow ajay alex ali
alma amssys andy angel annamarie anonymous ansible apache appuser
array asterisk astra autcom azureuser backend backups beatrice bitnami
bitrix bitwarden blair blue bob bodega bot bounce breonna builder
bwadmin caja carlos casaos cashier castle cc cds celery cesar cgpexpert
chia cinema client conectar controlm copia crafty ctf customer cyril
dangulo daniel db2inst1 dbadmin dd deamon debian debianuser default
deploy deployer desliga dev develop developer device devuser display
dixi dmdba docker dockeradmin dolphinscheduler dspace ec2-user elle
epsuser erpnext es eth ethereum exx fan felicity foundry frappe fred
free freshlogs frontend ftp ftpadmin ftptest ftpuser ftpuser1 g garett
gerrit gg ghost git gitea github gits glen gns3 gpadmin gpxu grid guest
guest123 hacluster hadoop halo hamed hdfs hello hscroot hu huawei hw in
infant informix installer intel intell invoices ionadmin ir ivan jacob
janice jarvis jason jboss jena jenkins jito jmarquez joe john jrodrig
kafka kali kapsch kevin khan kingbase kiosk kodi kori lab laravel lch
leann linuxadmin lixiaoqing local localhost luisa mailuser manager
marco martin marvin master matrix mc mcserver media mika mike mina
minecraft minima monitor monitoring mqm mysql myuser nagios newuser
nextcloud nexus nginx nick nishant NL5xUDpV2xRa node nominatim (none)
nrk nutanix odin odoo odoo15 odoo17 old oneadmin opc openbravo openvpn
operator oracle orangepi packer panda peter pi pivpn postgres precio01
pritchard proradis proxyuser prueba public pzuser q qiyuesuo qw qwerty
radarr radio rahul rancher rbs readwrite redis retag reza rhianna rich
roland root1 root2 roott RPM rstudio ruby runner sahil sales1 sam sammy
sdadmin se seafile server sftpuser sga share shiny shree sinusbot sipv
socks sol solana solr solv sonar sonarqube soporte sopuser spark splunk
squid stack steam stephanie stperez student Sujan super superadmin
supermaint superset suporte support svn sybase syncthing syncuser sysop
system t t3rr0r teamspeak tech tecnopos telco temp tempuser terraria
Test test test1 teste tester testftp testing TestUser testuser thaddeus
tibero tidb tom tomas tony toor4nsn toto ts ts1 ts3 tuan ubnt ubuntu
uftp ulysses user user01 user1 user10 user2 user3 user5 user8 userAdmin
userb userm username usuario usuario1 usuario2 vagrant valheim validator
vbox ventas01 victor vlad vncuser vpn vpnuser vps web weblogic webuser
work www yasmeen yessenia zhangsan zmarin