techduck sharing the noise
see Disclaimer and Terms of Service. For complete long lines use the index.txt.
Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box.. added a list of unique usernames from dictionary attacks.
Friday January 16, 2026

denied by configuration:

 1.214.42.172: 4 Times
 2.57.121.25 (hosting25.tronicsat.com): 18 Times
 2.57.121.112 (dns112.personaliseplus.com): 15 Times
 13.73.111.251: 5 Times
 13.93.203.231: 6 Times
 14.63.196.175: 18 Times
 14.103.102.130: 3 Times
 14.103.127.199: 4 Times
 14.103.164.98: 5 Times
 14.103.174.120: 3 Times
 20.185.243.158: 5 Times
 24.232.50.5 (OL5-50.fibertel.com.ar): 2 Times
 27.128.171.39: 1 Time
 34.92.81.41 (41.81.92.34.bc.googleusercontent.com): 5 Times
 36.67.56.52: 3 Times
 40.115.18.231: 2 Times
 40.127.67.83: 6 Times
 43.252.156.204 (ipv4-204-156-252.as55666.net): 5 Times
 45.55.57.187: 3 Times
 45.78.194.59: 5 Times
 45.78.205.66: 1 Time
 45.78.216.142: 5 Times
 45.78.217.178: 3 Times
 45.78.218.154: 3 Times
 45.78.219.35: 4 Times
 45.78.219.154: 3 Times
 45.251.72.2: 4 Times
 51.77.222.24 (24.ip-51-77-222.eu): 6 Times
 51.178.62.241: 5 Times
 60.199.224.2 (60-199-224-2.static.tfn.net.tw): 1 Time
 61.220.235.10 (61-220-235-10.hinet-ip.hinet.net): 4 Times
 65.49.1.219 (scan-77-07.shadowserver.org): 1 Time
 66.154.125.60: 3 Times
 68.183.236.1: 3 Times
 68.233.116.124: 5 Times
 74.94.234.151 (74-94-234-151-Michigan.hfc.comcastbusiness.net): 5 Times
 80.94.95.115: 26 Times
 80.94.95.116: 14 Times
 81.30.162.18 (server01.vsau.org): 3 Times
 82.115.40.190: 4 Times
 82.196.25.62 (62.25.196.82.in-addr.arpa): 4 Times
 83.168.78.105: 4 Times
 83.212.171.158 (www.adippde.gr): 6 Times
 91.202.233.33: 9 Times
 92.118.39.92: 5 Times
 92.205.57.72 (72.57.205.92.host.secureserver.net): 3 Times
 101.36.106.113: 4 Times
 101.47.50.50: 3 Times
 101.47.140.123: 3 Times
 101.47.161.42: 5 Times
 101.47.163.213: 4 Times
 101.47.163.225: 2 Times
 102.88.137.213: 5 Times
 103.52.114.250 (ip103-52-114-250.cloudhost.web.id): 4 Times
 103.67.78.102 (ip103-67-78-102.cloudhost.web.id): 4 Times
 103.148.157.64 (vps.Adneysoft.com): 4 Times
 103.164.20.29: 19 Times
 103.165.130.26 (26.130.165.103.net.iforte.net.id): 3 Times
 103.172.205.208 (ip103-172-205-208.cloudhost.web.id): 2 Times
 103.200.25.162: 3 Times
 103.210.21.242: 5 Times
 103.217.144.65 (ip103-217-144-65.cloudhost.web.id): 5 Times
 103.217.144.161 (ip103-217-144-161.cloudhost.web.id): 5 Times
 108.85.73.157 (108-85-73-157.lightspeed.wlfrct.sbcglobal.net): 5 Times
 115.190.74.101: 3 Times
 116.99.174.182 (dynamic-ip-adsl.viettel.vn): 4 Times
 118.26.36.195: 2 Times
 118.69.199.170: 5 Times
 118.219.234.233: 5 Times
 118.219.239.123: 2 Times
 119.53.253.2 (2.253.53.119.adsl-pool.jlccptt.net.cn): 1 Time
 120.240.236.178: 3 Times
 125.124.223.68: 3 Times
 134.122.121.56: 2 Times
 134.199.203.172: 1 Time
 134.209.102.173: 1 Time
 137.59.55.50 (Static-137.59.55.rackbank.com): 5 Times
 139.192.54.179: 1 Time
 149.54.30.114: 5 Times
 152.32.203.205: 5 Times
 154.92.109.196: 4 Times
 156.238.252.133: 3 Times
 158.178.141.16: 4 Times
 171.231.196.239 (dynamic-adsl.viettel.vn): 4 Times
 171.244.143.146: 3 Times
 172.96.179.9 (itdev789.hostpapavps.net): 4 Times
 176.120.22.13: 16 Times
 176.120.22.47: 12 Times
 181.116.220.140: 2 Times
 182.229.12.47: 3 Times
 185.68.246.174: 5 Times
 185.156.73.233: 30 Times
 186.233.204.9 (clt-home-9-204.233.186.paranaweb.com.br): 2 Times
 187.188.0.71 (fixed-187-188-0-71.totalplay.net): 5 Times
 189.89.20.45 (45.20.89.189.micron.com.br): 12 Times
 198.50.117.23: 4 Times
 200.32.52.150: 4 Times
 200.89.178.151 (151-178-89-200.fibertel.com.ar): 5 Times
 202.79.29.108: 4 Times
 209.141.43.77 (admin.aimangas.com): 1 Time
 211.73.190.226 (226-190-73-211.tinp.net.tw): 2 Times
 213.209.159.159: 34 Times
 221.151.181.65: 3 Times

system login attempted:

 sshd : 1 Time
 daemon : 1 Time
 nobody : 2 Times
 root : 532 Times

received disconnect:

 Bye Bye [preauth] : 385 Times
 Bye [preauth] : 71 Times
 Disconnected from invalid user  213.209.159.159 port 12601 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 14133 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 16196 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 26507 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 36633 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 45266 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 49219 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 55666 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 57066 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 59374 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 59707 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 60576 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 6935 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 7244 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 7742 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 8712 [preauth] : 1 Time
 drop connection #10 from [118.219.239.123]:45804 past MaxStartups : 1 Time
 drop connection #10 from [14.103.174.120]:34232 past MaxStartups : 1 Time
 drop connection #10 from [165.22.218.119]:42028 past MaxStartups : 1 Time
 drop connection #10 from [34.92.81.41]:53472 past MaxStartups : 1 Time
 drop connection #10 from [45.78.217.178]:37064 past MaxStartups : 1 Time
 drop connection #11 from [125.124.223.68]:47900 past MaxStartups : 1 Time
 drop connection #11 from [14.103.174.120]:48654 past MaxStartups : 1 Time
 drop connection #12 from [14.103.174.120]:55218 past MaxStartups : 1 Time
 error: beginning MaxStartups throttling : 3 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times
 error: kex_exchange_identification: read: Connection reset by peer : 15 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 5 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 5 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 5 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 5 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 5 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 5 Times
 exited MaxStartups throttling after 00:00:20, 1 connections dropped : 1 Time
 exited MaxStartups throttling after 00:00:26, 2 connections dropped : 1 Time
 exited MaxStartups throttling after 00:01:09, 5 connections dropped : 1 Time

dictionary attacks: 219 unique usernames.

 1111 1234 12345 a aaaa abdul abhi adm admin admin1 admin123 Administrator
 administrator adminuser amcrest anonymous antony app artifactory av azure
 banana bilal bind bitrix bitwarden blog bounce brocade caja2 carlo cctv
 client cloud commvault confluence crawl dan david debian deepak default
 dell denis deploy deployer dev developer devuser dockeruser dynamics
 ec2-user elasticsearch erika erp erpnext es es_user esuser extreme fa
 fedora fivem frappe freshlogs friend ftp ftp01 ftpuser george git github
 gogs grafana grid guest hacluster hi hpe hudson ian informix installer
 iso jack jani jenkinsadmin kafka karthik kelvin kevin keycloak lab ldap
 leo leonardo lol luka lukas luke mahima manager map matrix milad misha
 mongoadmin moth3r mqtt mukund mysql neo4j netadmin nextcloud nginx nico
 nicole nigger node (none) nutanix odoo15 omv onlime_r openkm operator
 oracle p pandora pi pivpn player portainer postgres pritchard prueba pt
 pvserver rabbitmq raj redis resin roberto roundcube RPM runner saeed saga
 samba sambauser sammy san scan scanner seafile service sftpuser share
 sharepoint sidadm skim sol solana sqlserver squid srs sshadmin student2
 Sujan superview support susi sysadmin system telecomadmin telnet test
 test1 teste teste1 testftp testing testssh testuser tomcat toto transfer
 ts2 tuser ubnt ubuntu untangle user usuario vagrant validator varnish
 vault viewer vinay vivotek vodafone vpn vps vpsuser webdev websphere
 wincce windows wireguard wjx wlsadmin wordpress xy yaroslav yasin yuriy
 zmarin zxy
 

By using this site you agree to accept the Terms Of Service and Disclaimer. CONTACT: info at techduck.ca