techduck sharing the noise see https://www.techduck.ca/td-ToS-Disclaimer.html Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box.. added a list of unique usernames from dictionary attacks. Friday January 16, 2026 denied by configuration: 1.214.42.172: 4 Times 2.57.121.25 (hosting25.tronicsat.com): 18 Times 2.57.121.112 (dns112.personaliseplus.com): 15 Times 13.73.111.251: 5 Times 13.93.203.231: 6 Times 14.63.196.175: 18 Times 14.103.102.130: 3 Times 14.103.127.199: 4 Times 14.103.164.98: 5 Times 14.103.174.120: 3 Times 20.185.243.158: 5 Times 24.232.50.5 (OL5-50.fibertel.com.ar): 2 Times 27.128.171.39: 1 Time 34.92.81.41 (41.81.92.34.bc.googleusercontent.com): 5 Times 36.67.56.52: 3 Times 40.115.18.231: 2 Times 40.127.67.83: 6 Times 43.252.156.204 (ipv4-204-156-252.as55666.net): 5 Times 45.55.57.187: 3 Times 45.78.194.59: 5 Times 45.78.205.66: 1 Time 45.78.216.142: 5 Times 45.78.217.178: 3 Times 45.78.218.154: 3 Times 45.78.219.35: 4 Times 45.78.219.154: 3 Times 45.251.72.2: 4 Times 51.77.222.24 (24.ip-51-77-222.eu): 6 Times 51.178.62.241: 5 Times 60.199.224.2 (60-199-224-2.static.tfn.net.tw): 1 Time 61.220.235.10 (61-220-235-10.hinet-ip.hinet.net): 4 Times 65.49.1.219 (scan-77-07.shadowserver.org): 1 Time 66.154.125.60: 3 Times 68.183.236.1: 3 Times 68.233.116.124: 5 Times 74.94.234.151 (74-94-234-151-Michigan.hfc.comcastbusiness.net): 5 Times 80.94.95.115: 26 Times 80.94.95.116: 14 Times 81.30.162.18 (server01.vsau.org): 3 Times 82.115.40.190: 4 Times 82.196.25.62 (62.25.196.82.in-addr.arpa): 4 Times 83.168.78.105: 4 Times 83.212.171.158 (www.adippde.gr): 6 Times 91.202.233.33: 9 Times 92.118.39.92: 5 Times 92.205.57.72 (72.57.205.92.host.secureserver.net): 3 Times 101.36.106.113: 4 Times 101.47.50.50: 3 Times 101.47.140.123: 3 Times 101.47.161.42: 5 Times 101.47.163.213: 4 Times 101.47.163.225: 2 Times 102.88.137.213: 5 Times 103.52.114.250 (ip103-52-114-250.cloudhost.web.id): 4 Times 103.67.78.102 (ip103-67-78-102.cloudhost.web.id): 4 Times 103.148.157.64 (vps.Adneysoft.com): 4 Times 103.164.20.29: 19 Times 103.165.130.26 (26.130.165.103.net.iforte.net.id): 3 Times 103.172.205.208 (ip103-172-205-208.cloudhost.web.id): 2 Times 103.200.25.162: 3 Times 103.210.21.242: 5 Times 103.217.144.65 (ip103-217-144-65.cloudhost.web.id): 5 Times 103.217.144.161 (ip103-217-144-161.cloudhost.web.id): 5 Times 108.85.73.157 (108-85-73-157.lightspeed.wlfrct.sbcglobal.net): 5 Times 115.190.74.101: 3 Times 116.99.174.182 (dynamic-ip-adsl.viettel.vn): 4 Times 118.26.36.195: 2 Times 118.69.199.170: 5 Times 118.219.234.233: 5 Times 118.219.239.123: 2 Times 119.53.253.2 (2.253.53.119.adsl-pool.jlccptt.net.cn): 1 Time 120.240.236.178: 3 Times 125.124.223.68: 3 Times 134.122.121.56: 2 Times 134.199.203.172: 1 Time 134.209.102.173: 1 Time 137.59.55.50 (Static-137.59.55.rackbank.com): 5 Times 139.192.54.179: 1 Time 149.54.30.114: 5 Times 152.32.203.205: 5 Times 154.92.109.196: 4 Times 156.238.252.133: 3 Times 158.178.141.16: 4 Times 171.231.196.239 (dynamic-adsl.viettel.vn): 4 Times 171.244.143.146: 3 Times 172.96.179.9 (itdev789.hostpapavps.net): 4 Times 176.120.22.13: 16 Times 176.120.22.47: 12 Times 181.116.220.140: 2 Times 182.229.12.47: 3 Times 185.68.246.174: 5 Times 185.156.73.233: 30 Times 186.233.204.9 (clt-home-9-204.233.186.paranaweb.com.br): 2 Times 187.188.0.71 (fixed-187-188-0-71.totalplay.net): 5 Times 189.89.20.45 (45.20.89.189.micron.com.br): 12 Times 198.50.117.23: 4 Times 200.32.52.150: 4 Times 200.89.178.151 (151-178-89-200.fibertel.com.ar): 5 Times 202.79.29.108: 4 Times 209.141.43.77 (admin.aimangas.com): 1 Time 211.73.190.226 (226-190-73-211.tinp.net.tw): 2 Times 213.209.159.159: 34 Times 221.151.181.65: 3 Times system login attempted: sshd : 1 Time daemon : 1 Time nobody : 2 Times root : 532 Times received disconnect: Bye Bye [preauth] : 385 Times Bye [preauth] : 71 Times Disconnected from invalid user 213.209.159.159 port 12601 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 14133 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 16196 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 26507 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 36633 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 45266 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 49219 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 55666 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 57066 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 59374 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 59707 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 60576 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 6935 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 7244 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 7742 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 8712 [preauth] : 1 Time drop connection #10 from [118.219.239.123]:45804 past MaxStartups : 1 Time drop connection #10 from [14.103.174.120]:34232 past MaxStartups : 1 Time drop connection #10 from [165.22.218.119]:42028 past MaxStartups : 1 Time drop connection #10 from [34.92.81.41]:53472 past MaxStartups : 1 Time drop connection #10 from [45.78.217.178]:37064 past MaxStartups : 1 Time drop connection #11 from [125.124.223.68]:47900 past MaxStartups : 1 Time drop connection #11 from [14.103.174.120]:48654 past MaxStartups : 1 Time drop connection #12 from [14.103.174.120]:55218 past MaxStartups : 1 Time error: beginning MaxStartups throttling : 3 Times error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times error: kex_exchange_identification: read: Connection reset by peer : 15 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 5 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 5 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 5 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 5 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 5 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 5 Times exited MaxStartups throttling after 00:00:20, 1 connections dropped : 1 Time exited MaxStartups throttling after 00:00:26, 2 connections dropped : 1 Time exited MaxStartups throttling after 00:01:09, 5 connections dropped : 1 Time dictionary attacks: 219 unique usernames. 1111 1234 12345 a aaaa abdul abhi adm admin admin1 admin123 Administrator administrator adminuser amcrest anonymous antony app artifactory av azure banana bilal bind bitrix bitwarden blog bounce brocade caja2 carlo cctv client cloud commvault confluence crawl dan david debian deepak default dell denis deploy deployer dev developer devuser dockeruser dynamics ec2-user elasticsearch erika erp erpnext es es_user esuser extreme fa fedora fivem frappe freshlogs friend ftp ftp01 ftpuser george git github gogs grafana grid guest hacluster hi hpe hudson ian informix installer iso jack jani jenkinsadmin kafka karthik kelvin kevin keycloak lab ldap leo leonardo lol luka lukas luke mahima manager map matrix milad misha mongoadmin moth3r mqtt mukund mysql neo4j netadmin nextcloud nginx nico nicole nigger node (none) nutanix odoo15 omv onlime_r openkm operator oracle p pandora pi pivpn player portainer postgres pritchard prueba pt pvserver rabbitmq raj redis resin roberto roundcube RPM runner saeed saga samba sambauser sammy san scan scanner seafile service sftpuser share sharepoint sidadm skim sol solana sqlserver squid srs sshadmin student2 Sujan superview support susi sysadmin system telecomadmin telnet test test1 teste teste1 testftp testing testssh testuser tomcat toto transfer ts2 tuser ubnt ubuntu untangle user usuario vagrant validator varnish vault viewer vinay vivotek vodafone vpn vps vpsuser webdev websphere wincce windows wireguard wjx wlsadmin wordpress xy yaroslav yasin yuriy zmarin zxy