techduck sharing the noise
see Disclaimer and Terms of Service. For complete long lines use the index.txt.
Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box.. added a list of unique usernames from dictionary attacks.
Monday March 9, 2026

denied by configuration:

 2.57.121.25 (hosting25.tronicsat.com): 17 Times
 2.57.121.112 (dns112.personaliseplus.com): 6 Times
 2.57.122.238: 10 Times
 4.194.4.255: 5 Times
 5.181.87.103: 2 Times
 5.223.67.128 (static.128.67.223.5.clients.your-server.de): 4 Times
 12.156.67.18: 5 Times
 13.70.19.40: 2 Times
 14.29.198.130: 3 Times
 14.63.217.28: 6 Times
 14.103.105.40: 2 Times
 14.103.105.246: 2 Times
 14.103.107.221: 2 Times
 14.103.111.16: 1 Time
 14.103.112.103: 2 Times
 14.103.112.107: 3 Times
 14.103.114.90: 4 Times
 14.103.116.173: 3 Times
 14.103.117.142: 3 Times
 14.103.120.75: 1 Time
 14.103.120.132: 1 Time
 14.103.123.8: 5 Times
 14.103.164.98: 5 Times
 14.103.174.120: 2 Times
 14.177.234.24 (static.vnpt.vn): 5 Times
 20.41.253.245: 4 Times
 20.50.192.172: 2 Times
 20.240.241.205: 18 Times
 27.107.168.154 (static-154.168.107.27-tataidc.co.in): 18 Times
 27.112.78.170 (ip27-112-78-170.cloudhost.web.id): 10 Times
 31.57.63.12: 10 Times
 34.77.6.179 (179.6.77.34.bc.googleusercontent.com): 1 Time
 34.81.72.185 (185.72.81.34.bc.googleusercontent.com): 4 Times
 36.66.16.233: 10 Times
 36.92.6.45: 9 Times
 36.111.82.21: 5 Times
 36.134.69.15: 2 Times
 38.19.156.18: 5 Times
 40.127.67.83: 15 Times
 43.128.149.159: 8 Times
 43.135.71.158: 5 Times
 43.153.102.228: 10 Times
 43.156.245.55: 14 Times
 43.158.91.178: 14 Times
 43.159.35.176: 10 Times
 43.160.246.110: 5 Times
 43.246.139.120: 5 Times
 45.66.228.255 (iceberg.30x.ru): 4 Times
 45.78.230.231: 9 Times
 45.148.10.121: 17 Times
 45.175.37.18: 10 Times
 45.249.247.165: 10 Times
 47.245.56.21: 1 Time
 49.75.185.123: 1 Time
 50.148.155.106 (c-50-148-155-106.hsd1.ca.comcast.net): 4 Times
 52.177.169.196: 4 Times
 61.182.2.26 (hebei.182.61.in-addr.arpa): 2 Times
 61.245.11.236: 3 Times
 62.193.106.227: 5 Times
 64.62.197.189 (scan-42h.shadowserver.org): 1 Time
 64.227.70.84: 5 Times
 65.254.93.243 (65-254-93-243.syd02.dsuser.network): 5 Times
 66.116.199.47 (66-116-199-47.unifiedlayer.com): 18 Times
 68.178.161.186 (186.161.178.68.host.secureserver.net): 18 Times
 68.183.203.22: 6 Times
 69.12.83.39: 8 Times
 69.12.83.46: 4 Times
 69.156.92.65 (bras-base-toroon6126w-grc-15-69-156-92-65.dsl.bell.ca): 5 Times
 72.10.32.138 (edelflex.com): 20 Times
 72.253.251.7: 5 Times
 74.243.239.219: 5 Times
 78.100.64.148 (mail.dunes-qatar.com): 5 Times
 79.36.240.89 (host-79-36-240-89.retail.telecomitalia.it): 5 Times
 79.137.76.231 (vps-cdb639e8.vps.ovh.net): 5 Times
 80.94.92.168: 3 Times
 80.94.92.171: 4 Times
 80.94.92.184: 40 Times
 81.211.72.167: 5 Times
 84.247.131.139 (vmi3020127.contaboserver.net): 5 Times
 85.184.248.187: 5 Times
 86.104.194.30 (notestandard.store): 5 Times
 87.156.185.48 (p579cb930.dip0.t-ipconnect.de): 18 Times
 91.134.140.4 (vps-8e0e6f23.vps.ovh.net): 5 Times
 91.202.233.33: 2 Times
 92.118.39.72: 5 Times
 92.205.57.72 (72.57.205.92.host.secureserver.net): 4 Times
 94.26.106.200: 2 Times
 95.165.77.31 (95-165-77-31.dynamic.spd-mgts.ru): 4 Times
 95.167.225.76: 5 Times
 95.240.192.149 (host-95-240-192-149.business.telecomitalia.it): 4 Times
 101.32.240.31: 5 Times
 101.34.27.97: 3 Times
 101.36.109.176: 5 Times
 101.36.113.241: 5 Times
 101.47.161.32: 7 Times
 101.126.14.37: 6 Times
 102.23.122.235: 11 Times
 102.88.137.145: 10 Times
 102.88.137.213: 14 Times
 103.13.206.122 (ip103-13-206-122.cloudhost.web.id): 10 Times
 103.13.207.32 (ip103-13-207-32.cloudhost.web.id): 11 Times
 103.37.6.88: 8 Times
 103.52.114.122 (ip103-52-114-122.cloudhost.web.id): 8 Times
 103.59.94.117 (ip103-59-94-117.cloudhost.web.id): 4 Times
 103.67.78.70 (ip103-67-78-70.cloudhost.web.id): 10 Times
 103.74.123.88 (sv123088.bkns.vn): 18 Times
 103.76.120.106: 4 Times
 103.76.120.206: 11 Times
 103.82.37.34 (103.82.37.34.cloudfly.vn): 5 Times
 103.88.76.27: 10 Times
 103.90.234.248: 11 Times
 103.143.72.165: 10 Times
 103.144.28.85: 5 Times
 103.172.28.62: 4 Times
 103.172.205.103 (ip103-172-205-103.cloudhost.web.id): 8 Times
 103.172.205.208 (ip103-172-205-208.cloudhost.web.id): 11 Times
 103.175.206.22: 10 Times
 103.176.20.115: 5 Times
 103.182.132.154: 11 Times
 103.191.92.14 (ip103-191-92-14.cloudhost.web.id): 4 Times
 103.193.178.248 (ip103-193-178-248.cloudhost.web.id): 5 Times
 103.200.25.198: 10 Times
 103.214.5.133: 36 Times
 103.234.53.173: 4 Times
 104.248.168.141: 5 Times
 105.27.148.94: 5 Times
 106.75.3.171: 1 Time
 107.150.103.210: 8 Times
 111.47.243.219: 1 Time
 112.78.1.94: 4 Times
 112.196.70.142: 9 Times
 113.125.46.138: 6 Times
 115.91.48.142: 5 Times
 115.190.241.219: 1 Time
 116.71.136.125: 5 Times
 116.99.173.28 (dynamic-ip-adsl.viettel.vn): 4 Times
 116.206.198.131 (ip-131-198-206-116.wjv-1.biznetg.io): 3 Times
 117.50.70.125: 4 Times
 118.26.36.195: 5 Times
 118.99.80.40: 10 Times
 118.99.115.99: 5 Times
 118.145.201.53: 1 Time
 120.48.20.170: 2 Times
 120.48.42.17: 3 Times
 120.48.168.33: 2 Times
 120.196.66.80: 2 Times
 122.114.69.235: 4 Times
 125.21.53.232: 7 Times
 125.76.228.194: 2 Times
 129.204.188.145: 3 Times
 130.12.181.85: 3 Times
 130.51.21.20: 5 Times
 134.122.121.56: 8 Times
 134.199.149.156 (test-suite-secure.healthymummy.com-4729): 1 Time
 134.199.166.13: 1 Time
 137.74.46.5 (vps-e3facb1b.vps.ovh.net): 5 Times
 138.68.177.254: 1 Time
 139.59.3.182: 5 Times
 139.59.66.22: 11 Times
 139.59.71.87: 4 Times
 139.99.133.77 (vps-91a8b0d9.vps.ovh.ca): 5 Times
 140.238.186.185: 9 Times
 140.249.223.130: 2 Times
 141.94.237.134 (vps-95cdb597.vps.ovh.net): 5 Times
 142.93.216.225: 20 Times
 142.93.217.121: 1 Time
 146.103.106.37 (v663738.hosted-by-vdsina.com): 4 Times
 151.47.81.109: 4 Times
 151.80.61.151 (vps-5d95afd4.vps.ovh.net): 5 Times
 152.32.189.21: 10 Times
 152.32.226.33: 11 Times
 152.53.21.84 (v2202406103207274321.ultrasrv.de): 5 Times
 153.99.92.11: 2 Times
 154.117.199.56: 5 Times
 154.125.147.88: 9 Times
 154.222.24.142: 4 Times
 155.4.244.169 (h-155-4-244-169.NA.cust.bahnhof.se): 14 Times
 156.238.252.133: 4 Times
 156.251.179.157: 5 Times
 158.174.210.161 (h-158-174-210-161.NA.cust.bahnhof.se): 5 Times
 159.54.167.94: 7 Times
 159.65.63.140: 1 Time
 161.49.89.39 (161.49.89.39.convergeict.com): 5 Times
 162.240.148.15 (vps-1266584.internal-atautomation.com): 5 Times
 163.7.3.26: 4 Times
 165.154.22.233: 5 Times
 165.227.3.79: 5 Times
 167.172.71.57: 1 Time
 168.75.87.42: 8 Times
 170.64.184.21: 1 Time
 170.64.185.28: 5 Times
 171.25.158.47: 4 Times
 172.86.66.35 (35.66.86.172.static.cloudzy.com): 5 Times
 172.96.179.9 (itdev789.hostpapavps.net): 3 Times
 172.185.24.228: 5 Times
 172.191.239.155: 9 Times
 172.208.24.217: 9 Times
 172.208.48.177: 8 Times
 175.138.221.152: 5 Times
 176.65.132.190: 3 Times
 176.120.22.47: 2 Times
 177.0.167.126: 11 Times
 178.128.121.29: 9 Times
 178.128.205.5: 5 Times
 179.125.24.202: 9 Times
 180.184.141.117: 1 Time
 180.184.178.165: 1 Time
 181.116.220.140: 5 Times
 182.61.148.217: 5 Times
 182.150.115.56: 4 Times
 182.254.176.101: 1 Time
 183.134.76.186: 3 Times
 183.134.91.28: 5 Times
 183.195.131.206 (.): 1 Time
 185.39.204.145 (141262.ip-ptr.tech): 7 Times
 185.68.184.66: 9 Times
 185.76.242.160: 1 Time
 185.86.76.213 (di-ant.com): 4 Times
 185.208.159.64: 5 Times
 185.208.159.109 (Vicidial): 20 Times
 186.154.90.114 (britishcouncil.org.co): 8 Times
 186.248.197.77 (BHE197077.CORP.atcmultimidia.com.br): 10 Times
 187.62.87.27: 10 Times
 188.137.176.254 (188-137-176-254.netherlands-3.vps.ac): 9 Times
 189.89.20.45 (45.20.89.189.micron.com.br): 12 Times
 189.217.130.86 (customer-189-217-130-86.cablevision.net.mx): 10 Times
 190.119.63.98: 10 Times
 190.181.27.27 (static-190-181-27-27.acelerate.net): 4 Times
 192.99.145.154 (vps-f5ee4647.vps.ovh.ca): 5 Times
 193.24.211.93: 1 Time
 193.32.162.145: 40 Times
 193.233.48.169 (127262.ip-ptr.tech): 5 Times
 194.107.115.2: 11 Times
 194.147.115.75: 5 Times
 196.0.120.6 (suitecrm.utclonline.co.ug): 11 Times
 197.199.224.52 (host-197.199.224.52.etisalat.com.eg): 5 Times
 199.195.251.10: 4 Times
 199.231.163.19 (secure7.grupoemar.mx): 5 Times
 200.32.52.150: 18 Times
 200.91.236.125 (mail.taxislibres.com.co): 10 Times
 200.108.174.4 (200.108.174.4.vildonettelecom.com.br): 4 Times
 201.16.238.49: 10 Times
 201.49.108.245 (201-49-108-245.static.ctbctelecom.com.br): 9 Times
 201.63.223.138 (201-63-223-138.customer.tdatabrasil.net.br): 5 Times
 202.51.214.99: 9 Times
 202.134.19.62 (static.cmcti.vn): 10 Times
 203.150.107.244 (244.107.150.203.sta.inet.co.th): 9 Times
 203.228.30.198: 10 Times
 206.62.67.46 (46.67.62.206.static.deltainternet.net.br): 10 Times
 206.189.80.102: 6 Times
 209.46.120.16 (ip209-46-120-16.pbiaas.com): 10 Times
 209.141.41.212: 5 Times
 209.141.53.124 (mx.ukraine.lviv.bakhmut-independently.shop): 5 Times
 210.90.155.178: 5 Times
 212.154.234.9: 5 Times
 212.227.98.164 (ip212-227-98-164.pbiaas.com): 10 Times
 213.209.159.159: 38 Times
 220.205.122.34: 4 Times
 221.229.218.50: 4 Times
 222.71.116.214: 5 Times
 222.222.168.9: 2 Times

system login attempted:

 bin : 6 Times
 root : 880 Times

received disconnect:

 Bye Bye [preauth] : 1311 Times
 Bye [preauth] : 62 Times
 Client disconnecting normally [preauth] : 1 Time
 EOF [preauth] : 152 Times
 Disconnected from invalid user  213.209.159.159 port 10546 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 13695 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 15945 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 19998 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 21752 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 26690 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 27851 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 29866 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 40158 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 41592 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 42847 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 46219 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 49752 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 51541 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 57694 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 61934 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 63947 [preauth] : 1 Time
 drop connection #10 from [106.13.64.124]:54000 past MaxStartups : 1 Time
 drop connection #10 from [14.103.117.142]:46970 past MaxStartups : 1 Time
 drop connection #10 from [14.103.117.142]:47242 past MaxStartups : 1 Time
 drop connection #10 from [203.228.30.198]:53562 past MaxStartups : 1 Time
 drop connection #10 from [217.154.233.215]:47550 past MaxStartups : 1 Time
 drop connection #11 from [14.103.114.197]:39742 past MaxStartups : 1 Time
 drop connection #11 from [36.134.69.15]:46304 past MaxStartups : 1 Time
 drop connection #14 from [103.143.72.165]:59230 past MaxStartups : 1 Time
 drop connection #14 from [36.134.69.15]:54392 past MaxStartups : 1 Time
 error: beginning MaxStartups throttling : 5 Times
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 2 Times
 error: kex_exchange_identification: read: Connection reset by peer : 12 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 3 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 3 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 3 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 3 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 3 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 3 Times
 error: send_error: write: Connection reset by peer : 1 Time
 exited MaxStartups throttling after 00:00:12, 1 connections dropped : 1 Time
 exited MaxStartups throttling after 00:00:22, 2 connections dropped : 1 Time
 exited MaxStartups throttling after 00:00:31, 1 connections dropped : 1 Time
 exited MaxStartups throttling after 00:00:40, 2 connections dropped : 1 Time
 exited MaxStartups throttling after 00:02:13, 3 connections dropped : 1 Time

dictionary attacks: 528 unique usernames.

 7days a aaa abdul abe acer admin admin1 adminer AdminGPON administrator
 airflow alex alfred alfredo ali allen alumno ami amin andre andrei andres
 android andy angel angelica ann anna anonymous ansible apache api apolo
 appserver arjun ark arlene arm arma3server arun ashish assistant astra
 atlas awsuser azuracast b backupuser banxgg bart bbb beehive ben bench
 big bitrix bkp blockchain bodega bogdan boom bot botuser bounce brain
 bryan builder c caja camera casa cecelia celery central ceo chat chaya
 chenghao choi chrome cisco claude clawd client cody comp contab controlm
 coolify crawl cristi cvs cw cy cyber cyrus dan daniel dario datacenter
 david db2inst db2inst1 deamon_root debian def degen dell demon den denis
 deploy desktop dev devuser dhiraj dhkim django dls docker dockeradmin
 doge downloader dylan ec2-user eddy eder ekp elastic elearn elemental
 elissa emma emo erp erpnext erpuser erwin es_user esuser ethan ethereum
 evil excel external exx f farmacia felix flussonic fox frappe frappeuser
 freshlogs friend ftb ftp ftpadmin ftpd ftpsecure ftp_test ftpupload
 ftp-user ftpuser ftpuser2 gabriel gateway gera geyser gg ghostadmin
 git github github-runner gitlab gns3 grafana Guest guest guillaume gw
 hailie hanul hari harry hdoop hik hl home hosting hr httpadmin huawei
 hugo hyun hzy i icecast in informatica install installer inversiones iot
 iptv issabel itadmin j james jason jason1 jaylan jean jeff jellyfin jevon
 jim jira jirka jito joao john julian k8s kafka kannel karim kasandra ken
 kevin kipt kirin kjh kk kobo kocom kodi krishna ks kubernetes kyle labs
 lamar lan legales lek leon lima linode linuxbrew live ljd llm lucas lyh
 lzy m1 maarch maeve mahesh mailcow maks mama manu marco marianna mastodon
 mata matic max maxim mc mcserver mcuser md melo mes mgeweb mgmt michael
 miguel mike milad minecraft ming minioadmin mitra mk mm mohsen mongod
 monitor mosquitto mukesh music myadmin myftp myuser n n8n nagios nao
 nasuser netflow netweb newusername nfe nginx nikola nima node nodejs
 noelia nominatim (none) nora nya ociispth odm odoo17 odroid old omm one
 oneadmin onlyoffice opc openeuler openvpn ops oracle orders otrs ovh
 pablo paid passbolt patricia patrick pavel peer peertube peter pi plex
 portal postgres prova proxyuser prueba public puppet purple pwserver
 pyramid quinn ram readonlyuser recovery reilly rema remote remoteuser
 rico robin robot rocio root1 roy rstudio rsync runner sa saad saeed sai
 sam sameer samuel sandro sansforensics sbbs sdtd search server sftptest
 sgp shaina shares shawn shiyi shredstream shyam silvia simeon sinusbot
 sky sm socks sol solana solv soporte spawner splunk sri srs sshtunnel
 ssl stan steam steamcmd stefan steve student student5 su sunshine super
 superman superset support svn syncuser sysadm sysadmin sysop talha tania
 tanvir team1 teamcity teamspeak telegram term1 term2 test test001 test1
 test123 teste testme testuser thor ti tiger tigergraph timemachine tmp
 tms toan toni trader trading trans travis tre trooper ts1 ts3server
 tsbot ttx tunnel ubnt ubuntu umar User user user01 user05 user1 user5
 userb userdeploy username usuario usuario1 usuarioftp vagrant validator
 vboxuser vendas verdaccio vicente victor vip1 vlc vm vpn vpnbot vpnuser
 waf web_admin webadmin webapps webappuser webftp webserver webuser
 wialon wiki wikijs wilson wm won wordpress wpuser ws wso2 xray xwiki
 yadira yann yasin yocto yujie zhangjh zhangliang zhangsan zhenshan
 zhuge zhy znc zxy zy zz zzy
 

By using this site you agree to accept the Terms Of Service and Disclaimer. CONTACT: info at techduck.ca