Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: SSH Scanning Activity SSH Scanning Activity

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Top 100 Usernames Attempted This Year
Username Attempts Percent
admin 72,089,373 42.16%
root 43,238,380 25.29%
sh 7,121,872 4.16%
enable 6,167,297 3.61%
support 5,631,658 3.29%
user 5,187,556 3.03%
linuxshell 3,921,163 2.29%
iptables -F 3,767,739 2.20%
guest 1,863,150 1.09%
enable 1,306,527 0.76%
Administrator 865,728 0.51%
default 827,085 0.48%
supervisor 809,835 0.47%
shell 767,306 0.45%
ubnt 728,753 0.43%
system 610,287 0.36%
0 488,878 0.29%
service 455,383 0.27%
666666 430,260 0.25%
888888 428,404 0.25%
admin1 425,707 0.25%
tech 412,616 0.24%
mother 399,382 0.23%
pi 376,797 0.22%
nproc 371,983 0.22%
test 364,384 0.21%
tomcat 304,282 0.18%
oracle 298,010 0.17%
system 220,496 0.13%
>/var/.ptmx && cd /var/ 217,974 0.13%
sh 188,319 0.11%
linuxshell 149,436 0.09%
>/mnt/.ptmx && cd /mnt/ 140,128 0.08%
>/dev/netslink/.ptmx && cd /dev/netslink/ 139,408 0.08%
>/var/tmp/.ptmx && cd /var/tmp/ 139,397 0.08%
>/bin/.ptmx && cd /bin/ 139,396 0.08%
>/boot/.ptmx && cd /boot/ 139,395 0.08%
telnetadmin 117,860 0.07%
shell 114,591 0.07%
ubuntu 105,504 0.06%
CUAdmin 101,458 0.06%
postgres 89,815 0.05%
telecomadmin 82,000 0.05%
osmc 78,115 0.05%
bin 67,174 0.04%
ftpuser 63,230 0.04%
hikvision 55,769 0.03%
dnsekakf2$$ 55,543 0.03%
git 53,952 0.03%
enable\x00 49,155 0.03%
22 46,676 0.03%
mysql 42,712 0.02%
deploy 40,992 0.02%
www 37,707 0.02%
nagios 36,996 0.02%
shell\x00 36,746 0.02%
ftpadmin 34,693 0.02%
bah 34,592 0.02%
defa 34,174 0.02%
hadoop 33,890 0.02%
teladmin 33,597 0.02%
daemon 33,511 0.02%
e8ehome 32,280 0.02%
>/tmp/.ptmx && cd /tmp/ 32,271 0.02%
Alphanetworks 31,358 0.02%
wlahh 31,077 0.02%
ftp 30,390 0.02%
user1 30,203 0.02%
telnet 28,259 0.02%
isp 28,087 0.02%
jenkins 27,655 0.02%
localhost 27,130 0.02%
1111111 26,122 0.02%
ts3 25,752 0.02%
teamspeak 25,694 0.02%
>/usr/.Switchblades && cd /usr/ 25,565 0.01%
none 25,544 0.01%
minecraft 25,374 0.01%
localadm 24,865 0.01%
ispadmin 24,441 0.01%
>/dev/.ptmx && cd /dev/ 24,253 0.01%
server 24,055 0.01%
testuser 23,954 0.01%
e8telnet 23,805 0.01%
>/etc/.ptmx && cd /etc/ 23,400 0.01%
>/dev/shm/.ptmx && cd /dev/shm/ 23,391 0.01%
>/.ptmx && cd / 23,390 0.01%
localadmin 22,985 0.01%
>/usr/.ptmx && cd /usr/ 22,834 0.01%
>/var/run/.ptmx && cd /var/run/ 22,824 0.01%
dev 22,405 0.01%
supportadmin 21,881 0.01%
demo 21,878 0.01%
apache 21,793 0.01%
odoo 21,519 0.01%
debian 20,702 0.01%
GET / HTTP/1.1 19,939 0.01%
student 19,679 0.01%
1234 19,113 0.01%
nexxadmin 19,084 0.01%