techduck sharing the noise see https://www.techduck.ca/td-ToS-Disclaimer.html Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box.. added a list of unique usernames from dictionary attacks. Friday April 10, 2026 denied by configuration: 2.57.121.25 (hosting25.tronicsat.com): 5 Times 2.57.121.112 (dns112.personaliseplus.com): 4 Times 2.57.122.210: 5 Times 2.57.122.238: 10 Times 5.182.83.231 (undefined.hostname.localhost): 14 Times 14.29.240.154: 3 Times 14.63.225.172: 5 Times 14.103.45.20: 4 Times 14.103.50.32: 2 Times 14.103.115.5: 1 Time 14.103.115.115: 5 Times 20.240.241.205: 1 Time 34.121.138.255 (255.138.121.34.bc.googleusercontent.com): 3 Times 34.126.176.149 (149.176.126.34.bc.googleusercontent.com): 5 Times 36.104.144.114: 1 Time 36.138.134.121: 2 Times 42.96.19.37: 5 Times 43.134.113.23: 3 Times 43.156.245.55: 4 Times 43.158.91.178: 16 Times 43.166.245.172: 5 Times 43.167.212.236: 2 Times 43.226.47.158: 4 Times 45.38.41.112: 1 Time 45.90.237.177: 2 Times 45.134.9.27: 3 Times 45.143.203.239 (40089.ip-ptr.tech): 4 Times 45.148.10.121: 14 Times 46.225.127.111 (static.111.127.225.46.clients.your-server.de): 5 Times 47.199.151.41 (47-199-151-41.fdr01.venc.fl.ip.frontiernet.net): 1 Time 50.99.170.152 (d50-99-170-152.abhsia.telus.net): 5 Times 52.176.211.73: 4 Times 52.224.109.126: 2 Times 58.33.97.119: 3 Times 64.62.156.29 (scan-61-5.shadowserver.org): 1 Time 64.227.159.76: 1 Time 66.97.42.71 (vps-5415729-x.dattaweb.com): 1 Time 68.178.161.186 (186.161.178.68.host.secureserver.net): 17 Times 69.6.221.248 (69-6-221-248.unifiedlayer.com): 3 Times 77.90.185.37: 5 Times 77.90.185.80: 6 Times 77.90.185.87: 5 Times 77.90.185.107: 6 Times 80.66.66.70: 13 Times 80.94.92.168: 1 Time 80.94.92.171: 8 Times 80.94.92.182: 37 Times 80.94.92.186: 50 Times 81.177.101.45: 4 Times 87.248.237.138 (87.248.237.138.pool.sknt.ru): 4 Times 87.251.64.144: 15 Times 87.251.64.145: 16 Times 90.156.195.162: 1 Time 91.18.67.65 (p5b124341.dip0.t-ipconnect.de): 2 Times 92.118.39.56: 10 Times 92.118.39.72: 5 Times 94.154.172.244: 1 Time 101.47.156.21: 15 Times 102.210.148.92: 2 Times 103.43.191.43: 4 Times 103.74.123.88 (sv123088.bkns.vn): 18 Times 103.143.11.150: 1 Time 103.200.22.162: 2 Times 103.243.24.124: 17 Times 106.75.88.55: 3 Times 106.254.54.101: 5 Times 113.249.104.20: 4 Times 115.190.106.110: 4 Times 116.203.55.233 (static.233.55.203.116.clients.your-server.de): 1 Time 120.48.135.189: 2 Times 120.48.154.88: 4 Times 122.169.35.16 (abts-mh-dynamic-016.35.169.122.airtelbroadband.in): 1 Time 123.48.142.249 (123-48-142-249.area54b.commufa.jp): 3 Times 124.163.255.210 (210.255.163.124.adsl-pool.sx.cn): 2 Times 124.251.110.186: 2 Times 139.19.117.129 (inet-research-scan-5.mpi-inf.mpg.de): 21 Times 139.59.21.7: 1 Time 139.162.149.239 (139-162-149-239.ip.linodeusercontent.com): 1 Time 150.223.20.12: 5 Times 159.65.77.254: 6 Times 159.223.40.78: 4 Times 159.223.94.92: 5 Times 162.240.57.187 (vps-8266124.textual.com.br): 2 Times 162.240.167.229 (vps-1602227.academytec.mx): 2 Times 163.7.9.84: 4 Times 165.154.227.158: 3 Times 165.154.231.46: 4 Times 171.25.158.47: 2 Times 171.25.158.80: 4 Times 172.94.9.56: 6 Times 172.94.9.61: 6 Times 172.94.9.64: 6 Times 172.94.9.204: 6 Times 178.205.30.224: 2 Times 180.167.96.50: 2 Times 181.23.112.179 (181-23-112-179.speedy.com.ar): 14 Times 181.78.5.101 (101.5.78.181.ufinet.com.co): 4 Times 185.93.89.49: 5 Times 185.93.89.103: 6 Times 185.93.89.119: 6 Times 185.93.89.135: 5 Times 185.93.89.142: 5 Times 186.68.83.104 (104.cpe-186-68-83.gye.satnet.net): 4 Times 187.16.96.250 (mvx-187-16-96-250.mundivox.com): 12 Times 191.101.59.180 (chslero.site): 4 Times 192.253.248.124: 6 Times 192.253.248.130: 5 Times 192.253.248.135: 6 Times 193.32.162.145: 5 Times 193.32.162.151: 5 Times 198.98.56.227 (mail.brycev.xyz): 3 Times 200.24.69.113: 3 Times 201.6.100.191 (c90664bf.static.spo.virtua.com.br): 3 Times 202.134.19.62 (static.cmcti.vn): 14 Times 210.92.144.218: 4 Times 211.215.17.214: 13 Times 213.177.179.21: 5 Times 213.209.159.159: 10 Times 217.216.90.71 (vmi3077861.contaboserver.net): 1 Time 218.157.163.203: 2 Times 221.229.220.180: 4 Times 222.113.254.20: 2 Times system login attempted: root : 1103 Times received disconnect: Bye Bye [preauth] : 384 Times Bye [preauth] : 19 Times drop connection #10 from [180.167.96.50]:35268 past MaxStartups : 1 Time drop connection #10 from [180.167.96.50]:55270 past MaxStartups : 1 Time drop connection #10 from [45.148.10.151]:12538 past MaxStartups : 1 Time drop connection #11 from [36.138.134.121]:50908 past MaxStartups : 1 Time error: beginning MaxStartups throttling : 2 Times error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 4 Times error: kex_exchange_identification: read: Connection reset by peer : 13 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 3 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 3 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 3 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 3 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 3 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 3 Times exited MaxStartups throttling after 00:00:15, 1 connections dropped : 1 Time exited MaxStartups throttling after 00:01:04, 3 connections dropped : 1 Time dictionary attacks: 156 unique usernames. 1111 123 2222 321 3333 3d 4444 5555 666 6666 777 7777 888 8888 999 9999 a ADMIN Admin admin admin1 AdminGPON administrator adminuser ali alice analisa audit bill blockchain bot bridger centos clyde code87 coding contab corrine david dbuser debian demo deploy deployer deployhq dev developer devuser ec2-user elastic erp erpuser eth ethereum factura firedancer foundry frank frappe freshlogs ftp-user ftpuser game git gitlab gpadmin grafana guest headscale hmsftp ishmael james jensen jibs jin jupyter kalista kaveh koha latitude lester lighthouse linuxuser loginuser lola mailer mapr minima misha n8n nabi nagios node nodeuser (none) odoo oe opadmin operation ops oracle orangepi pedro pi postgres prod proxyuser ps psadmin qadmin raydium relay sammy server service sftpuser share socks sol solana solr solv steam teamspeak teamspeak2 test test1 test10 test2 test4 test6 testadmin testing testmail1 testuser tom ts ts3server tutor ubnt ubuntu ubuntuftp umair user user01 user1 user33 userlogin username validator vendas vpn william work wqmarlduiqkmgs yousef