Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: SSH Scanning Activity - Internet Security | DShield SSH Scanning Activity


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Please help us make this page better by submitting your own data. For details on how to submit your data see our diary blog post announcing this feature. https://github.com/jkakavas/kippo-pyshield

We now offer a Raspberry Pi setup! For instructions read our diary blog post announcing it and/or our later diary blog post explaining how to run a DShield Sensor inside docker on RasPi.

Top 10 Usernames Attempted Today
Username Attempts Percent
root 842,789 27.38%
admin 782,641 25.43%
enable 140,337 4.56%
shell 127,461 4.14%
sh 120,326 3.91%
system 113,412 3.68%
>/var/.ptmx && cd /var/ 63,404 2.06%
>/mnt/.ptmx && cd /mnt/ 57,777 1.88%
>/var/tmp/.ptmx && cd /var/tmp/ 57,441 1.87%
>/dev/netslink/.ptmx && cd /dev/netslink/ 57,436 1.87%
View More
Top 10 Usernames Attempted This Month
Username Attempts Percent
root 22,577,841 34.56%
admin 13,079,564 20.02%
sh 2,715,381 4.16%
enable 1,871,386 2.86%
enable 1,685,362 2.58%
shell 1,682,789 2.58%
system 1,623,575 2.49%
support 1,002,643 1.53%
>/var/.ptmx && cd /var/ 968,428 1.48%
enable\x00 897,027 1.37%
View More
Top 20 Usernames Attempted This Year
Username Attempts Percent
root 29,223,442 27.11%
admin 23,262,207 21.58%
sh 4,967,080 4.61%
system 4,080,075 3.78%
enable 4,061,827 3.77%
shell 3,452,742 3.20%
>/var/.ptmx && cd /var/ 2,505,279 2.32%
enable 2,266,518 2.10%
>/mnt/.ptmx && cd /mnt/ 2,262,935 2.10%
>/var/tmp/.ptmx && cd /var/tmp/ 2,255,283 2.09%
>/dev/netslink/.ptmx && cd /dev/netslink/ 2,254,404 2.09%
>/bin/.ptmx && cd /bin/ 2,254,107 2.09%
>/boot/.ptmx && cd /boot/ 2,253,311 2.09%
guest 1,315,172 1.22%
support 1,309,146 1.21%
user 1,044,079 0.97%
/bin/busybox rm -rf 19ju3d 902i13 854,974 0.79%
shell 748,617 0.69%
default 600,105 0.56%
linuxshell 528,634 0.49%
View More
Usernames Attempted This Year By Character Length
Length Attempts Percent
1 18,427 0.02%
2 5,680,361 5.27%
3 1,071,733 0.99%
4 31,340,557 29.07%
5 26,250,973 24.35%
6 12,104,692 11.23%
7 7,200,323 6.68%
8 552,493 0.51%
9 650,095 0.60%
10 1,293,558 1.20%
11 134,310 0.12%
12 174,651 0.16%
13 397,086 0.37%
14 56,277 0.05%
15 518,234 0.48%
16 30,319 0.03%
17 39,084 0.04%
18 3,303 0.00%
19 25,173 0.02%
20 13,502 0.01%