Threat Level: green Handler on Duty: Jim Clausing

SANS ISC: Uptick in ssh login attempts with usernames pi and ubnt - Internet Security | DShield SANS ISC InfoSec Forums


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Uptick in ssh login attempts with usernames pi and ubnt
Anyone else seeing an uptick in ssh login attempts with the usernames of pi and ubnt? 34 for ubnt and 38 for pi in the last 24 hours. 290 for pi and 0 for ubnt in the previous 24 hours. geeknik

7 Posts
hi Geeknik,

yup, seeing them too: 4 attempts at ubnt, 4 at pi and 4 at root from each host. interestingly, all the hosts matching this pattern also participated in the recent distributed `D-link/admin/ftpuser/root' scans (see Jim's diary on 2014/14/10).

--
juan
Anonymous

-

Sign Up for Free or Log In to start participating in the conversation!