Threat Level: green Handler on Duty: Jim Clausing

SANS ISC: Uptick in ssh login attempts with usernames pi and ubnt SANS ISC InfoSec Forums

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Uptick in ssh login attempts with usernames pi and ubnt
Anyone else seeing an uptick in ssh login attempts with the usernames of pi and ubnt? 34 for ubnt and 38 for pi in the last 24 hours. 290 for pi and 0 for ubnt in the previous 24 hours. geeknik

7 Posts
hi Geeknik,

yup, seeing them too: 4 attempts at ubnt, 4 at pi and 4 at root from each host. interestingly, all the hosts matching this pattern also participated in the recent distributed `D-link/admin/ftpuser/root' scans (see Jim's diary on 2014/14/10).

--
juan
Anonymous

-

Sign Up for Free or Log In to start participating in the conversation!