techduck sharing the noise
see https://www.techduck.ca/td-ToS-Disclaimer.html

Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org
and countless others for quick stats right out of the box.. added a
list of unique usernames from dictionary attacks.

Thursday February 12, 2026

denied by configuration:

 2.57.121.25 (hosting25.tronicsat.com): 18 Times
 2.57.121.112 (dns112.personaliseplus.com): 18 Times
 2.57.122.210: 5 Times
 5.182.83.231 (undefined.hostname.localhost): 2 Times
 14.103.107.29: 2 Times
 14.103.114.172: 3 Times
 14.103.114.227: 3 Times
 14.103.118.136: 3 Times
 14.103.118.145: 3 Times
 14.103.123.75: 3 Times
 14.103.175.138: 3 Times
 14.103.198.33: 4 Times
 14.225.3.79: 4 Times
 20.12.41.6: 4 Times
 23.227.173.100 (remote.unkybill-it.com): 4 Times
 27.79.4.153 (localhost): 5 Times
 27.79.46.117 (localhost): 4 Times
 41.63.62.103: 2 Times
 43.165.4.13: 1 Time
 43.166.245.172: 3 Times
 45.55.57.187: 5 Times
 45.87.249.140: 1 Time
 45.119.84.54: 3 Times
 45.121.147.48 (briskgriffin.info): 3 Times
 45.142.193.146: 1 Time
 45.148.10.121: 2 Times
 45.169.128.70: 3 Times
 45.169.200.254: 2 Times
 46.191.141.152 (46.191.141.152.dynamic.ufanet.ru): 6 Times
 50.232.189.209: 2 Times
 51.178.43.161 (prod1.masterit.fr): 4 Times
 52.233.193.61: 4 Times
 58.249.142.152: 1 Time
 61.28.144.154 (154.144.28.61.unassigned.static.eastern-tele.com): 2 Times
 61.155.106.101: 5 Times
 62.28.222.221: 4 Times
 64.225.65.195: 5 Times
 64.225.73.94: 1 Time
 64.227.131.199: 5 Times
 65.49.1.99 (scan-58f.shadowserver.org): 1 Time
 65.109.9.98 (static.98.9.109.65.clients.your-server.de): 4 Times
 76.79.213.69 (syn-076-079-213-069.biz.spectrum.com): 3 Times
 78.89.154.59: 5 Times
 80.94.92.168: 2 Times
 80.94.92.171: 8 Times
 81.192.46.35 (adsl-35-46-192-81.adsl.iam.net.ma): 2 Times
 86.54.42.185: 5 Times
 91.202.233.33: 3 Times
 92.27.157.252 (host-92-27-157-252.static.as13285.net): 3 Times
 92.118.39.56: 10 Times
 92.118.39.72: 5 Times
 92.118.39.76: 5 Times
 92.205.56.196 (196.56.205.92.host.secureserver.net): 3 Times
 92.205.57.72 (72.57.205.92.host.secureserver.net): 3 Times
 101.47.50.237: 7 Times
 101.47.140.130: 12 Times
 101.47.141.128: 2 Times
 101.47.143.252: 5 Times
 101.126.14.37: 4 Times
 101.126.88.93: 3 Times
 101.126.88.203: 3 Times
 102.88.137.80: 3 Times
 103.67.78.49 (ip103-67-78-49.cloudhost.web.id): 2 Times
 103.153.254.168 (ecstateic.com): 3 Times
 103.154.77.48 (48.subs77.t2net.id): 4 Times
 103.168.135.187: 4 Times
 103.183.75.90 (ip103-183-75-90.cloudhost.web.id): 3 Times
 103.215.80.173: 5 Times
 103.239.252.132 (103-239-252-132.Dhaka.carnival.com.bd): 4 Times
 103.249.84.18: 3 Times
 104.248.207.181: 5 Times
 107.150.106.178: 3 Times
 114.220.176.172: 4 Times
 115.190.10.158: 3 Times
 115.190.51.71: 1 Time
 115.190.63.82: 2 Times
 115.190.136.219: 4 Times
 115.190.211.111: 1 Time
 118.45.205.42: 3 Times
 118.193.33.3: 4 Times
 123.58.212.64: 1 Time
 123.156.230.101: 4 Times
 125.21.53.232: 4 Times
 125.88.225.11: 5 Times
 128.1.44.162: 6 Times
 128.1.132.137: 4 Times
 128.199.184.19: 2 Times
 134.209.196.231: 5 Times
 139.59.64.16: 3 Times
 143.110.241.64: 3 Times
 144.217.13.134 (vps-2cf81da8.vps.ovh.ca): 3 Times
 151.80.141.196 (196.ip-151-80-141.eu): 7 Times
 152.42.137.249: 3 Times
 154.91.90.27: 4 Times
 154.92.109.196: 5 Times
 158.51.126.17 (znc.xmirc.net): 3 Times
 160.187.165.218: 3 Times
 161.132.89.53: 3 Times
 161.132.180.118 (inkalim.com.pe): 2 Times
 162.19.243.145 (vps-19fa6452.vps.ovh.net): 3 Times
 162.214.206.114 (dedi-432065.grupocaneva.com): 4 Times
 162.241.87.197 (162-241-87-197.webhostbox.net): 4 Times
 162.241.127.152 (162-241-127-152.webhostbox.net): 3 Times
 165.22.203.183: 3 Times
 165.154.227.158: 1 Time
 167.71.13.58: 3 Times
 167.71.128.40: 2 Times
 171.244.141.86: 3 Times
 176.120.22.13: 17 Times
 176.120.22.47: 6 Times
 176.193.224.85: 2 Times
 178.62.201.90: 1 Time
 178.62.224.66: 5 Times
 180.76.98.88: 4 Times
 180.153.91.15: 3 Times
 181.49.8.57: 3 Times
 183.221.243.13: 1 Time
 185.40.30.168: 4 Times
 185.158.23.150: 6 Times
 185.177.239.3: 2 Times
 186.116.54.250: 2 Times
 186.248.197.77 (BHE197077.CORP.atcmultimidia.com.br): 4 Times
 188.166.125.54: 7 Times
 189.50.142.82 (mail.cacp.org.br): 4 Times
 189.89.20.45 (45.20.89.189.micron.com.br): 12 Times
 189.194.140.170 (customer-PUE-140-170.megared.net.mx): 4 Times
 190.167.237.191 (191.237.167.190.l.static.claro.net.do): 5 Times
 193.32.162.146: 14 Times
 194.107.115.11: 2 Times
 194.107.115.199: 4 Times
 200.91.236.125 (mail.taxislibres.com.co): 2 Times
 202.51.214.98: 4 Times
 202.108.48.228: 2 Times
 202.125.94.71: 3 Times
 202.184.131.196: 3 Times
 203.145.34.239 (ip203-145-34-239.cloudhost.web.id): 4 Times
 203.190.11.42: 3 Times
 207.154.227.150: 4 Times
 212.11.64.164: 2 Times
 213.135.168.228: 4 Times
 213.209.159.159: 37 Times
 217.154.38.181 (ip217.154.38-181.pbiaas.com): 3 Times
 221.151.181.65: 2 Times
 222.98.122.37: 2 Times
 223.123.65.63: 2 Times

system login attempted:

 root : 561 Times

received disconnect:

  [preauth] : 94 Times
 Bye Bye [preauth] : 528 Times
 Bye [preauth] : 75 Times
 Client disconnecting normally [preauth] : 1 Time
 Normal Shutdown, Thank you for playing [preauth] : 5 Times
 Disconnected from invalid user  213.209.159.159 port 13144 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 14385 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 26665 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 29635 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 32638 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 38094 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 38626 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 44656 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 45823 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 46716 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 50646 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 51054 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 54720 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 58289 [preauth] : 1 Time
 Disconnected from invalid user  213.209.159.159 port 63209 [preauth] : 1 Time
 error: Protocol major versions differ: 2 vs. 1 : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time
 error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 3 Times
 error: kex_exchange_identification: read: Connection reset by peer : 17 Times
 error: kex_protocol_error: type 20 seq 2 [preauth] : 4 Times
 error: kex_protocol_error: type 20 seq 4 [preauth] : 4 Times
 error: kex_protocol_error: type 20 seq 6 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 3 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 5 [preauth] : 4 Times
 error: kex_protocol_error: type 30 seq 7 [preauth] : 4 Times

dictionary attacks: 254 unique usernames.

 12 a abc abdollahi abomb Admin admin administracion administrator
 adriano alexis alfresco alvin anas ang anton antonio anything appuser
 array aryan asif auditor ayoub azureuser baikal bbb bbs bd blockchain
 bot builder business caja01 cc ceph chris chromeuser cl cmm cod2server
 cod4server code contact dan daniel dataset david db debian debug delme
 demo demo1 deploy deployer developer devops devuser dheeraj docker
 eagle easy ec2-user elasticsearch emily eren esuser evil fb frappe
 freshlogs frontend ftp ftpadmin ftptest ftpuser ftpuser1 gabriella
 gandalf git guest hacluster hik hosting htest hugo huser hussain in
 info intel ipfs irene iso janice jbernal jboss john jtribino junior jy
 kate katie ken kevin kyle laravel laurent ldap liming linuxbrew lisong
 logviewer lsadmin luke mariadb marissa marvin mass max mc medical michael
 mike mohamad mohamed mohammad monitor mostafa moth3r mssql murali music
 myuser n8n nathan netflow newuser nextcloud nexus nmrsu node node1 (none)
 nvidia odoo odoo17 odoo8 openkm oracle orangepi pacific partner patrol
 pierre postgres pp progres prometheus prueba pymes pzuser qi radmin
 raja randy reports rizal roo rsyncuser ryan sagar sales1 sam samira
 sara sbi server sftpuser shamim share sharon sinh smile sneha socksuser
 sol solana solv sonar sprixin squid srs steam suporte support swadmin
 sysadm system tab tbadmin teamspeak temp TEST test test1 test12 test2
 test3 teste testt testuser ts ts3bot tunneluser turtle uat ubnt ubuntu
 user user0 user1 user40 user8 userftp usertest usman usuario validator
 victor view vncuser vpn wan wangke wangyao webapp webuser whatsapp
 windows work www x xh xuhao xwang yash yogesh yunwei yy zahid zeeshan zzg