Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC: SSH Scanning Activity SSH Scanning Activity

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Top 50 Usernames Attempted This Month
Username Attempts Percent
root 39,799,094 33.86%
admin 29,369,491 24.98%
sh 4,103,165 3.49%
system 3,495,800 2.97%
support 2,837,194 2.41%
user 2,330,942 1.98%
enable 2,322,675 1.98%
shell 1,839,090 1.56%
>/var/.ptmx && cd /var/ 1,821,597 1.55%
enable 1,810,518 1.54%
guest 1,584,953 1.35%
>/mnt/.ptmx && cd /mnt/ 1,479,379 1.26%
>/var/tmp/.ptmx && cd /var/tmp/ 1,448,865 1.23%
>/dev/netslink/.ptmx && cd /dev/netslink/ 1,448,369 1.23%
>/bin/.ptmx && cd /bin/ 1,448,263 1.23%
>/boot/.ptmx && cd /boot/ 1,448,136 1.23%
default 834,789 0.71%
enable\x00 616,539 0.52%
shell\x00 569,208 0.48%
linuxshell 451,148 0.38%
shell 418,093 0.36%
Administrator 408,035 0.35%
supervisor 373,017 0.32%
/bin/busybox rm -rf 19ju3d 902i13 332,855 0.28%
ubnt 328,223 0.28%
nproc 305,802 0.26%
/bin/busybox rm -rf NiGGeR69xd dropper 289,684 0.25%
iptables -F 275,477 0.23%
test 247,585 0.21%
service 231,396 0.20%
0 221,064 0.19%
sh 205,044 0.17%
>/tmp/.misa && cd /tmp/ 196,534 0.17%
/bin/busybox rm -rf nya oxdedfgt 192,841 0.16%
admin1 188,451 0.16%
tech 180,952 0.15%
666666 177,766 0.15%
888888 177,276 0.15%
mother 174,938 0.15%
>/dev/.misa && cd /dev/ 170,622 0.15%
>/var/run/.misa && cd /var/run/ 168,580 0.14%
>/.misa && cd / 168,429 0.14%
>/dev/shm/.misa && cd /dev/shm/ 168,427 0.14%
>/etc/.misa && cd /etc/ 168,409 0.14%
>/usr/.misa && cd /usr/ 168,392 0.14%
adm 159,285 0.14%
>/tmp/.ptmx && cd /tmp/ 152,474 0.13%
wlahh 146,672 0.12%
>/dev/.ptmx && cd /dev/ 143,698 0.12%
>/var/run/.ptmx && cd /var/run/ 140,428 0.12%