techduck sharing the noise see https://www.techduck.ca/td-ToS-Disclaimer.html Thanks to those hard workers with debian.org, fail2ban.org, logwatch.org and countless others for quick stats right out of the box.. added a list of unique usernames from dictionary attacks. Monday March 9, 2026 denied by configuration: 2.57.121.25 (hosting25.tronicsat.com): 17 Times 2.57.121.112 (dns112.personaliseplus.com): 6 Times 2.57.122.238: 10 Times 4.194.4.255: 5 Times 5.181.87.103: 2 Times 5.223.67.128 (static.128.67.223.5.clients.your-server.de): 4 Times 12.156.67.18: 5 Times 13.70.19.40: 2 Times 14.29.198.130: 3 Times 14.63.217.28: 6 Times 14.103.105.40: 2 Times 14.103.105.246: 2 Times 14.103.107.221: 2 Times 14.103.111.16: 1 Time 14.103.112.103: 2 Times 14.103.112.107: 3 Times 14.103.114.90: 4 Times 14.103.116.173: 3 Times 14.103.117.142: 3 Times 14.103.120.75: 1 Time 14.103.120.132: 1 Time 14.103.123.8: 5 Times 14.103.164.98: 5 Times 14.103.174.120: 2 Times 14.177.234.24 (static.vnpt.vn): 5 Times 20.41.253.245: 4 Times 20.50.192.172: 2 Times 20.240.241.205: 18 Times 27.107.168.154 (static-154.168.107.27-tataidc.co.in): 18 Times 27.112.78.170 (ip27-112-78-170.cloudhost.web.id): 10 Times 31.57.63.12: 10 Times 34.77.6.179 (179.6.77.34.bc.googleusercontent.com): 1 Time 34.81.72.185 (185.72.81.34.bc.googleusercontent.com): 4 Times 36.66.16.233: 10 Times 36.92.6.45: 9 Times 36.111.82.21: 5 Times 36.134.69.15: 2 Times 38.19.156.18: 5 Times 40.127.67.83: 15 Times 43.128.149.159: 8 Times 43.135.71.158: 5 Times 43.153.102.228: 10 Times 43.156.245.55: 14 Times 43.158.91.178: 14 Times 43.159.35.176: 10 Times 43.160.246.110: 5 Times 43.246.139.120: 5 Times 45.66.228.255 (iceberg.30x.ru): 4 Times 45.78.230.231: 9 Times 45.148.10.121: 17 Times 45.175.37.18: 10 Times 45.249.247.165: 10 Times 47.245.56.21: 1 Time 49.75.185.123: 1 Time 50.148.155.106 (c-50-148-155-106.hsd1.ca.comcast.net): 4 Times 52.177.169.196: 4 Times 61.182.2.26 (hebei.182.61.in-addr.arpa): 2 Times 61.245.11.236: 3 Times 62.193.106.227: 5 Times 64.62.197.189 (scan-42h.shadowserver.org): 1 Time 64.227.70.84: 5 Times 65.254.93.243 (65-254-93-243.syd02.dsuser.network): 5 Times 66.116.199.47 (66-116-199-47.unifiedlayer.com): 18 Times 68.178.161.186 (186.161.178.68.host.secureserver.net): 18 Times 68.183.203.22: 6 Times 69.12.83.39: 8 Times 69.12.83.46: 4 Times 69.156.92.65 (bras-base-toroon6126w-grc-15-69-156-92-65.dsl.bell.ca): 5 Times 72.10.32.138 (edelflex.com): 20 Times 72.253.251.7: 5 Times 74.243.239.219: 5 Times 78.100.64.148 (mail.dunes-qatar.com): 5 Times 79.36.240.89 (host-79-36-240-89.retail.telecomitalia.it): 5 Times 79.137.76.231 (vps-cdb639e8.vps.ovh.net): 5 Times 80.94.92.168: 3 Times 80.94.92.171: 4 Times 80.94.92.184: 40 Times 81.211.72.167: 5 Times 84.247.131.139 (vmi3020127.contaboserver.net): 5 Times 85.184.248.187: 5 Times 86.104.194.30 (notestandard.store): 5 Times 87.156.185.48 (p579cb930.dip0.t-ipconnect.de): 18 Times 91.134.140.4 (vps-8e0e6f23.vps.ovh.net): 5 Times 91.202.233.33: 2 Times 92.118.39.72: 5 Times 92.205.57.72 (72.57.205.92.host.secureserver.net): 4 Times 94.26.106.200: 2 Times 95.165.77.31 (95-165-77-31.dynamic.spd-mgts.ru): 4 Times 95.167.225.76: 5 Times 95.240.192.149 (host-95-240-192-149.business.telecomitalia.it): 4 Times 101.32.240.31: 5 Times 101.34.27.97: 3 Times 101.36.109.176: 5 Times 101.36.113.241: 5 Times 101.47.161.32: 7 Times 101.126.14.37: 6 Times 102.23.122.235: 11 Times 102.88.137.145: 10 Times 102.88.137.213: 14 Times 103.13.206.122 (ip103-13-206-122.cloudhost.web.id): 10 Times 103.13.207.32 (ip103-13-207-32.cloudhost.web.id): 11 Times 103.37.6.88: 8 Times 103.52.114.122 (ip103-52-114-122.cloudhost.web.id): 8 Times 103.59.94.117 (ip103-59-94-117.cloudhost.web.id): 4 Times 103.67.78.70 (ip103-67-78-70.cloudhost.web.id): 10 Times 103.74.123.88 (sv123088.bkns.vn): 18 Times 103.76.120.106: 4 Times 103.76.120.206: 11 Times 103.82.37.34 (103.82.37.34.cloudfly.vn): 5 Times 103.88.76.27: 10 Times 103.90.234.248: 11 Times 103.143.72.165: 10 Times 103.144.28.85: 5 Times 103.172.28.62: 4 Times 103.172.205.103 (ip103-172-205-103.cloudhost.web.id): 8 Times 103.172.205.208 (ip103-172-205-208.cloudhost.web.id): 11 Times 103.175.206.22: 10 Times 103.176.20.115: 5 Times 103.182.132.154: 11 Times 103.191.92.14 (ip103-191-92-14.cloudhost.web.id): 4 Times 103.193.178.248 (ip103-193-178-248.cloudhost.web.id): 5 Times 103.200.25.198: 10 Times 103.214.5.133: 36 Times 103.234.53.173: 4 Times 104.248.168.141: 5 Times 105.27.148.94: 5 Times 106.75.3.171: 1 Time 107.150.103.210: 8 Times 111.47.243.219: 1 Time 112.78.1.94: 4 Times 112.196.70.142: 9 Times 113.125.46.138: 6 Times 115.91.48.142: 5 Times 115.190.241.219: 1 Time 116.71.136.125: 5 Times 116.99.173.28 (dynamic-ip-adsl.viettel.vn): 4 Times 116.206.198.131 (ip-131-198-206-116.wjv-1.biznetg.io): 3 Times 117.50.70.125: 4 Times 118.26.36.195: 5 Times 118.99.80.40: 10 Times 118.99.115.99: 5 Times 118.145.201.53: 1 Time 120.48.20.170: 2 Times 120.48.42.17: 3 Times 120.48.168.33: 2 Times 120.196.66.80: 2 Times 122.114.69.235: 4 Times 125.21.53.232: 7 Times 125.76.228.194: 2 Times 129.204.188.145: 3 Times 130.12.181.85: 3 Times 130.51.21.20: 5 Times 134.122.121.56: 8 Times 134.199.149.156 (test-suite-secure.healthymummy.com-4729): 1 Time 134.199.166.13: 1 Time 137.74.46.5 (vps-e3facb1b.vps.ovh.net): 5 Times 138.68.177.254: 1 Time 139.59.3.182: 5 Times 139.59.66.22: 11 Times 139.59.71.87: 4 Times 139.99.133.77 (vps-91a8b0d9.vps.ovh.ca): 5 Times 140.238.186.185: 9 Times 140.249.223.130: 2 Times 141.94.237.134 (vps-95cdb597.vps.ovh.net): 5 Times 142.93.216.225: 20 Times 142.93.217.121: 1 Time 146.103.106.37 (v663738.hosted-by-vdsina.com): 4 Times 151.47.81.109: 4 Times 151.80.61.151 (vps-5d95afd4.vps.ovh.net): 5 Times 152.32.189.21: 10 Times 152.32.226.33: 11 Times 152.53.21.84 (v2202406103207274321.ultrasrv.de): 5 Times 153.99.92.11: 2 Times 154.117.199.56: 5 Times 154.125.147.88: 9 Times 154.222.24.142: 4 Times 155.4.244.169 (h-155-4-244-169.NA.cust.bahnhof.se): 14 Times 156.238.252.133: 4 Times 156.251.179.157: 5 Times 158.174.210.161 (h-158-174-210-161.NA.cust.bahnhof.se): 5 Times 159.54.167.94: 7 Times 159.65.63.140: 1 Time 161.49.89.39 (161.49.89.39.convergeict.com): 5 Times 162.240.148.15 (vps-1266584.internal-atautomation.com): 5 Times 163.7.3.26: 4 Times 165.154.22.233: 5 Times 165.227.3.79: 5 Times 167.172.71.57: 1 Time 168.75.87.42: 8 Times 170.64.184.21: 1 Time 170.64.185.28: 5 Times 171.25.158.47: 4 Times 172.86.66.35 (35.66.86.172.static.cloudzy.com): 5 Times 172.96.179.9 (itdev789.hostpapavps.net): 3 Times 172.185.24.228: 5 Times 172.191.239.155: 9 Times 172.208.24.217: 9 Times 172.208.48.177: 8 Times 175.138.221.152: 5 Times 176.65.132.190: 3 Times 176.120.22.47: 2 Times 177.0.167.126: 11 Times 178.128.121.29: 9 Times 178.128.205.5: 5 Times 179.125.24.202: 9 Times 180.184.141.117: 1 Time 180.184.178.165: 1 Time 181.116.220.140: 5 Times 182.61.148.217: 5 Times 182.150.115.56: 4 Times 182.254.176.101: 1 Time 183.134.76.186: 3 Times 183.134.91.28: 5 Times 183.195.131.206 (.): 1 Time 185.39.204.145 (141262.ip-ptr.tech): 7 Times 185.68.184.66: 9 Times 185.76.242.160: 1 Time 185.86.76.213 (di-ant.com): 4 Times 185.208.159.64: 5 Times 185.208.159.109 (Vicidial): 20 Times 186.154.90.114 (britishcouncil.org.co): 8 Times 186.248.197.77 (BHE197077.CORP.atcmultimidia.com.br): 10 Times 187.62.87.27: 10 Times 188.137.176.254 (188-137-176-254.netherlands-3.vps.ac): 9 Times 189.89.20.45 (45.20.89.189.micron.com.br): 12 Times 189.217.130.86 (customer-189-217-130-86.cablevision.net.mx): 10 Times 190.119.63.98: 10 Times 190.181.27.27 (static-190-181-27-27.acelerate.net): 4 Times 192.99.145.154 (vps-f5ee4647.vps.ovh.ca): 5 Times 193.24.211.93: 1 Time 193.32.162.145: 40 Times 193.233.48.169 (127262.ip-ptr.tech): 5 Times 194.107.115.2: 11 Times 194.147.115.75: 5 Times 196.0.120.6 (suitecrm.utclonline.co.ug): 11 Times 197.199.224.52 (host-197.199.224.52.etisalat.com.eg): 5 Times 199.195.251.10: 4 Times 199.231.163.19 (secure7.grupoemar.mx): 5 Times 200.32.52.150: 18 Times 200.91.236.125 (mail.taxislibres.com.co): 10 Times 200.108.174.4 (200.108.174.4.vildonettelecom.com.br): 4 Times 201.16.238.49: 10 Times 201.49.108.245 (201-49-108-245.static.ctbctelecom.com.br): 9 Times 201.63.223.138 (201-63-223-138.customer.tdatabrasil.net.br): 5 Times 202.51.214.99: 9 Times 202.134.19.62 (static.cmcti.vn): 10 Times 203.150.107.244 (244.107.150.203.sta.inet.co.th): 9 Times 203.228.30.198: 10 Times 206.62.67.46 (46.67.62.206.static.deltainternet.net.br): 10 Times 206.189.80.102: 6 Times 209.46.120.16 (ip209-46-120-16.pbiaas.com): 10 Times 209.141.41.212: 5 Times 209.141.53.124 (mx.ukraine.lviv.bakhmut-independently.shop): 5 Times 210.90.155.178: 5 Times 212.154.234.9: 5 Times 212.227.98.164 (ip212-227-98-164.pbiaas.com): 10 Times 213.209.159.159: 38 Times 220.205.122.34: 4 Times 221.229.218.50: 4 Times 222.71.116.214: 5 Times 222.222.168.9: 2 Times system login attempted: bin : 6 Times root : 880 Times received disconnect: Bye Bye [preauth] : 1311 Times Bye [preauth] : 62 Times Client disconnecting normally [preauth] : 1 Time EOF [preauth] : 152 Times Disconnected from invalid user 213.209.159.159 port 10546 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 13695 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 15945 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 19998 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 21752 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 26690 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 27851 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 29866 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 40158 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 41592 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 42847 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 46219 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 49752 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 51541 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 57694 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 61934 [preauth] : 1 Time Disconnected from invalid user 213.209.159.159 port 63947 [preauth] : 1 Time drop connection #10 from [106.13.64.124]:54000 past MaxStartups : 1 Time drop connection #10 from [14.103.117.142]:46970 past MaxStartups : 1 Time drop connection #10 from [14.103.117.142]:47242 past MaxStartups : 1 Time drop connection #10 from [203.228.30.198]:53562 past MaxStartups : 1 Time drop connection #10 from [217.154.233.215]:47550 past MaxStartups : 1 Time drop connection #11 from [14.103.114.197]:39742 past MaxStartups : 1 Time drop connection #11 from [36.134.69.15]:46304 past MaxStartups : 1 Time drop connection #14 from [103.143.72.165]:59230 past MaxStartups : 1 Time drop connection #14 from [36.134.69.15]:54392 past MaxStartups : 1 Time error: beginning MaxStartups throttling : 5 Times error: kex_exchange_identification: client sent invalid protocol identifier "" : 1 Time error: kex_exchange_identification: client sent invalid protocol identifier "GET / HTTP/1.1" : 2 Times error: kex_exchange_identification: read: Connection reset by peer : 12 Times error: kex_protocol_error: type 20 seq 2 [preauth] : 3 Times error: kex_protocol_error: type 20 seq 4 [preauth] : 3 Times error: kex_protocol_error: type 20 seq 6 [preauth] : 3 Times error: kex_protocol_error: type 30 seq 3 [preauth] : 3 Times error: kex_protocol_error: type 30 seq 5 [preauth] : 3 Times error: kex_protocol_error: type 30 seq 7 [preauth] : 3 Times error: send_error: write: Connection reset by peer : 1 Time exited MaxStartups throttling after 00:00:12, 1 connections dropped : 1 Time exited MaxStartups throttling after 00:00:22, 2 connections dropped : 1 Time exited MaxStartups throttling after 00:00:31, 1 connections dropped : 1 Time exited MaxStartups throttling after 00:00:40, 2 connections dropped : 1 Time exited MaxStartups throttling after 00:02:13, 3 connections dropped : 1 Time dictionary attacks: 528 unique usernames. 7days a aaa abdul abe acer admin admin1 adminer AdminGPON administrator airflow alex alfred alfredo ali allen alumno ami amin andre andrei andres android andy angel angelica ann anna anonymous ansible apache api apolo appserver arjun ark arlene arm arma3server arun ashish assistant astra atlas awsuser azuracast b backupuser banxgg bart bbb beehive ben bench big bitrix bkp blockchain bodega bogdan boom bot botuser bounce brain bryan builder c caja camera casa cecelia celery central ceo chat chaya chenghao choi chrome cisco claude clawd client cody comp contab controlm coolify crawl cristi cvs cw cy cyber cyrus dan daniel dario datacenter david db2inst db2inst1 deamon_root debian def degen dell demon den denis deploy desktop dev devuser dhiraj dhkim django dls docker dockeradmin doge downloader dylan ec2-user eddy eder ekp elastic elearn elemental elissa emma emo erp erpnext erpuser erwin es_user esuser ethan ethereum evil excel external exx f farmacia felix flussonic fox frappe frappeuser freshlogs friend ftb ftp ftpadmin ftpd ftpsecure ftp_test ftpupload ftp-user ftpuser ftpuser2 gabriel gateway gera geyser gg ghostadmin git github github-runner gitlab gns3 grafana Guest guest guillaume gw hailie hanul hari harry hdoop hik hl home hosting hr httpadmin huawei hugo hyun hzy i icecast in informatica install installer inversiones iot iptv issabel itadmin j james jason jason1 jaylan jean jeff jellyfin jevon jim jira jirka jito joao john julian k8s kafka kannel karim kasandra ken kevin kipt kirin kjh kk kobo kocom kodi krishna ks kubernetes kyle labs lamar lan legales lek leon lima linode linuxbrew live ljd llm lucas lyh lzy m1 maarch maeve mahesh mailcow maks mama manu marco marianna mastodon mata matic max maxim mc mcserver mcuser md melo mes mgeweb mgmt michael miguel mike milad minecraft ming minioadmin mitra mk mm mohsen mongod monitor mosquitto mukesh music myadmin myftp myuser n n8n nagios nao nasuser netflow netweb newusername nfe nginx nikola nima node nodejs noelia nominatim (none) nora nya ociispth odm odoo17 odroid old omm one oneadmin onlyoffice opc openeuler openvpn ops oracle orders otrs ovh pablo paid passbolt patricia patrick pavel peer peertube peter pi plex portal postgres prova proxyuser prueba public puppet purple pwserver pyramid quinn ram readonlyuser recovery reilly rema remote remoteuser rico robin robot rocio root1 roy rstudio rsync runner sa saad saeed sai sam sameer samuel sandro sansforensics sbbs sdtd search server sftptest sgp shaina shares shawn shiyi shredstream shyam silvia simeon sinusbot sky sm socks sol solana solv soporte spawner splunk sri srs sshtunnel ssl stan steam steamcmd stefan steve student student5 su sunshine super superman superset support svn syncuser sysadm sysadmin sysop talha tania tanvir team1 teamcity teamspeak telegram term1 term2 test test001 test1 test123 teste testme testuser thor ti tiger tigergraph timemachine tmp tms toan toni trader trading trans travis tre trooper ts1 ts3server tsbot ttx tunnel ubnt ubuntu umar User user user01 user05 user1 user5 userb userdeploy username usuario usuario1 usuarioftp vagrant validator vboxuser vendas verdaccio vicente victor vip1 vlc vm vpn vpnbot vpnuser waf web_admin webadmin webapps webappuser webftp webserver webuser wialon wiki wikijs wilson wm won wordpress wpuser ws wso2 xray xwiki yadira yann yasin yocto yujie zhangjh zhangliang zhangsan zhenshan zhuge zhy znc zxy zy zz zzy