Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: SSH Scanning Activity - SANS Internet Storm Center SSH Scanning Activity

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Top 50 Usernames Attempted This Month
Username Attempts Percent
root 96,143,712 43.64%
admin 41,389,045 18.79%
user 3,919,801 1.78%
guest 3,763,366 1.71%
support 2,972,465 1.35%
sh 2,237,281 1.02%
system 2,092,364 0.95%
test 1,761,330 0.80%
enable 1,377,352 0.63%
nproc 1,133,139 0.51%
>/var/.ptmx && cd /var/ 1,071,483 0.49%
shell 987,217 0.45%
>/mnt/.ptmx && cd /mnt/ 852,293 0.39%
ubnt 848,919 0.39%
>/var/tmp/.ptmx && cd /var/tmp/ 846,219 0.38%
>/dev/netslink/.ptmx && cd /dev/netslink/ 846,018 0.38%
>/bin/.ptmx && cd /bin/ 845,875 0.38%
>/boot/.ptmx && cd /boot/ 845,704 0.38%
Administrator 833,141 0.38%
enable 794,976 0.36%
default 752,661 0.34%
oracle 541,473 0.25%
ubuntu 522,447 0.24%
supervisor 507,323 0.23%
postgres 414,652 0.19%
pi 371,043 0.17%
admin1 352,389 0.16%
service 340,326 0.15%
ftpuser 333,655 0.15%
tech 310,753 0.14%
git 299,762 0.14%
adm 282,707 0.13%
mysql 257,721 0.12%
tomcat 243,961 0.11%
666666 242,615 0.11%
888888 241,746 0.11%
mother 237,803 0.11%
22 231,833 0.11%
nagios 228,736 0.10%
enable\x00 214,018 0.10%
111111 211,308 0.10%
user1 207,326 0.09%
demo 204,962 0.09%
1234 204,504 0.09%
deploy 201,628 0.09%
ftp 196,885 0.09%
shell 195,084 0.09%
shell\x00 194,487 0.09%
web 192,385 0.09%
testuser 176,577 0.08%