Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: SSH Scanning Activity SSH Scanning Activity

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Top 50 Usernames Attempted This Month
Username Attempts Percent
root 29,757,841 34.28%
admin 17,619,403 20.30%
system 2,789,300 3.21%
sh 2,673,018 3.08%
enable 2,333,336 2.69%
shell 1,841,605 2.12%
>/var/.ptmx && cd /var/ 1,744,764 2.01%
support 1,580,821 1.82%
enable\x00 1,531,889 1.76%
>/mnt/.ptmx && cd /mnt/ 1,513,207 1.74%
>/var/tmp/.ptmx && cd /var/tmp/ 1,502,122 1.73%
>/dev/netslink/.ptmx && cd /dev/netslink/ 1,500,681 1.73%
>/bin/.ptmx && cd /bin/ 1,500,624 1.73%
>/boot/.ptmx && cd /boot/ 1,500,498 1.73%
shell\x00 1,331,574 1.53%
guest 1,262,857 1.45%
user 1,253,497 1.44%
default 828,593 0.95%
enable 797,764 0.92%
/bin/busybox rm -rf NiGGeR69xd dropper 473,589 0.55%
shell 441,728 0.51%
/bin/busybox rm -rf nya oxdedfgt 280,999 0.32%
/bin/busybox rm -rf 19ju3d 902i13 251,416 0.29%
>/tmp/.ptmx && cd /tmp/ 250,155 0.29%
>/dev/.ptmx && cd /dev/ 232,094 0.27%
>/var/run/.ptmx && cd /var/run/ 227,119 0.26%
>/.ptmx && cd / 227,020 0.26%
>/dev/shm/.ptmx && cd /dev/shm/ 226,992 0.26%
>/etc/.ptmx && cd /etc/ 226,968 0.26%
>/usr/.ptmx && cd /usr/ 226,926 0.26%
adm 194,074 0.22%
Administrator 193,875 0.22%
supervisor 188,887 0.22%
sh 156,970 0.18%
ubnt 145,252 0.17%
service 141,803 0.16%
22 135,413 0.16%
1234 135,309 0.16%
linuxshell 132,934 0.15%
telnet 130,335 0.15%
\x15\x08\x08\x13 122,125 0.14%
/bin/busybox rm -rf lzrd oxdedfgt 116,384 0.13%
111111 110,746 0.13%
>/tmp/.misa && cd /tmp/ 110,361 0.13%
telecomadmin 103,109 0.12%
\x06\x03 95,287 0.11%
>/dev/.misa && cd /dev/ 92,911 0.11%
>/var/run/.misa && cd /var/run/ 92,296 0.11%
>/.misa && cd / 92,285 0.11%
>/dev/shm/.misa && cd /dev/shm/ 92,276 0.11%