Threat Level: green Handler on Duty: Russell Eubanks

SANS ISC: SSH Scanning Activity - Internet Security | DShield SSH Scanning Activity


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Top 100 Usernames Attempted This Year
Username Attempts Percent
admin 168,118,162 32.00%
root 139,968,652 26.65%
system 18,694,159 3.56%
sh 18,028,367 3.43%
enable 15,021,646 2.86%
shell 12,028,854 2.29%
>/var/.ptmx && cd /var/ 10,293,623 1.96%
>/mnt/.ptmx && cd /mnt/ 8,425,359 1.60%
>/var/tmp/.ptmx && cd /var/tmp/ 8,342,619 1.59%
>/dev/netslink/.ptmx && cd /dev/netslink/ 8,337,843 1.59%
>/bin/.ptmx && cd /bin/ 8,337,146 1.59%
>/boot/.ptmx && cd /boot/ 8,335,800 1.59%
guest 6,849,950 1.30%
support 6,441,351 1.23%
enable 5,904,160 1.12%
user 5,174,840 0.99%
default 2,987,765 0.57%
shell 2,797,612 0.53%
/bin/busybox rm -rf 19ju3d 902i13 2,303,701 0.44%
adm 2,182,331 0.42%
Administrator 1,665,987 0.32%
supervisor 1,595,906 0.30%
/bin/busybox rm -rf NiGGeR69xd dropper 1,310,755 0.25%
>/tmp/.misa && cd /tmp/ 1,300,227 0.25%
sh 1,292,572 0.25%
linuxshell 1,292,372 0.25%
111111 1,203,944 0.23%
22 1,166,601 0.22%
enable\x00 1,144,128 0.22%
1234 1,127,498 0.21%
>/dev/.misa && cd /dev/ 1,107,185 0.21%
>/var/run/.misa && cd /var/run/ 1,096,890 0.21%
>/.misa && cd / 1,094,544 0.21%
>/dev/shm/.misa && cd /dev/shm/ 1,094,524 0.21%
>/etc/.misa && cd /etc/ 1,094,517 0.21%
>/usr/.misa && cd /usr/ 1,094,491 0.21%
shell\x00 1,088,169 0.21%
service 1,040,639 0.20%
ubnt 971,802 0.19%
/bin/busybox rm -rf nya oxdedfgt 915,340 0.17%
pi 893,443 0.17%
wlahh 796,650 0.15%
>/tmp/.ptmx && cd /tmp/ 764,349 0.15%
mother 759,375 0.14%
tech 758,115 0.14%
admin1 738,091 0.14%
888888 730,443 0.14%
666666 727,009 0.14%
>/dev/.ptmx && cd /dev/ 674,866 0.13%
>/etc/.ptmx && cd /etc/ 664,261 0.13%
>/usr/.ptmx && cd /usr/ 664,200 0.13%
>/var/run/.ptmx && cd /var/run/ 664,068 0.13%
>/.ptmx && cd / 663,871 0.13%
>/dev/shm/.ptmx && cd /dev/shm/ 663,828 0.13%
oracle 626,197 0.12%
/bin/busybox rm -rf lzrd oxdedfgt 532,945 0.10%
system 514,778 0.10%
test 413,162 0.08%
tomcat 370,663 0.07%
bah 364,034 0.07%
ftp 346,717 0.07%
telecomadmin 343,265 0.07%
linuxshell 327,583 0.06%
/bin/busybox rm -rf zhr zehir 314,870 0.06%
ftpuser 293,106 0.06%
nagios 282,536 0.05%
telnetadmin 268,357 0.05%
telnet 258,304 0.05%
sh\x00 247,500 0.05%
123 244,538 0.05%
/bin/busybox rm -rf mezy myth 243,800 0.05%
operator 238,888 0.05%
0 236,433 0.05%
101 224,929 0.04%
/bin/busybox rm -rf f7s41 t0n41 222,547 0.04%
1111 222,180 0.04%
a 221,182 0.04%
nproc 218,948 0.04%
123321 213,056 0.04%
adam 211,622 0.04%
266344 211,529 0.04%
12345 210,951 0.04%
1502 210,361 0.04%
aaa 208,706 0.04%
3comcso 208,184 0.04%
mcUser 207,870 0.04%
adfexc 206,501 0.04%
acc 205,891 0.04%
mg3500 197,968 0.04%
daemon 196,608 0.04%
e8telnet 187,859 0.04%
wlahh\x04 183,765 0.03%
>/var/.pptmx && cd /var/ 180,698 0.03%
usuario 170,466 0.03%
ubuntu 168,269 0.03%
/bin/busybox rm -rf SO190Ij1X dropper 166,576 0.03%
postgres 162,710 0.03%
/bin/busybox rm -rf KARUU-KILL KILL-KARUU 156,691 0.03%
>/mnt/.pptmx && cd /mnt/ 153,253 0.03%
>/var/tmp/.pptmx && cd /var/tmp/ 151,769 0.03%