Threat Level: green Handler on Duty: Xavier Mertens

SANS ISC: SSH Scanning Activity - SANS Internet Storm Center SSH Scanning Activity

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Top 100 Usernames Attempted This Year
Username Attempts Percent
root 124,819,989 46.91%
admin 12,331,392 4.63%
user 5,816,443 2.19%
test 3,238,278 1.22%
nproc 3,177,016 1.19%
ubuntu 1,431,020 0.54%
oracle 1,158,691 0.44%
guest 1,148,554 0.43%
support 1,103,773 0.41%
postgres 1,020,420 0.38%
ftpuser 833,379 0.31%
git 734,371 0.28%
administrator 671,997 0.25%
mysql 517,107 0.19%
ubnt 463,269 0.17%
testuser 441,743 0.17%
111111 416,940 0.16%
ftp 402,091 0.15%
test1 379,941 0.14%
pi 377,388 0.14%
deploy 375,680 0.14%
hadoop 360,302 0.14%
supervisor 359,060 0.13%
super 350,284 0.13%
nagios 342,909 0.13%
tomcat 326,393 0.12%
user2 326,098 0.12%
default 316,075 0.12%
student 315,812 0.12%
user1 314,037 0.12%
minecraft 309,907 0.12%
server 304,614 0.11%
jenkins 301,793 0.11%
dev 298,468 0.11%
cisco 291,198 0.11%
enable 287,894 0.11%
1234 276,001 0.10%
www 269,785 0.10%
service 269,606 0.10%
usuario 258,755 0.10%
demo 253,328 0.10%
ts3 236,969 0.09%
admin1 236,573 0.09%
test2 234,387 0.09%
knockknockwhosthere 231,204 0.09%
teamspeak 230,260 0.09%
ansible 214,794 0.08%
123321 211,537 0.08%
zabbix 208,836 0.08%
web 205,778 0.08%
system 202,832 0.08%
shell 201,187 0.08%
tech 200,471 0.08%
backup 197,407 0.07%
steam 197,393 0.07%
odoo 196,509 0.07%
manager 192,771 0.07%
22 189,358 0.07%
alex 184,030 0.07%
mother 181,682 0.07%
GET / HTTP/1.1 181,460 0.07%
debian 179,861 0.07%
888888 174,826 0.07%
operator 173,770 0.07%
666666 172,935 0.06%
developer 169,587 0.06%
CUAdmin 159,734 0.06%
es 157,827 0.06%
centos 156,968 0.06%
tester 155,781 0.06%
mc 155,659 0.06%
sysadmin 154,283 0.06%
info 153,045 0.06%
username 152,830 0.06%
master 147,592 0.06%
temp 146,816 0.06%
webmaster 146,303 0.05%
apache 145,606 0.05%
www-data 144,129 0.05%
adm 140,348 0.05%
ts 139,854 0.05%
tom 131,232 0.05%
uftp 130,859 0.05%
ec2-user 128,801 0.05%
Accept: */* 126,797 0.05%
vbox 126,018 0.05%
sinusbot 125,729 0.05%
vnc 125,533 0.05%
ftptest 124,854 0.05%
teste 124,133 0.05%
app 123,723 0.05%
123 122,592 0.05%
deployer 120,249 0.05%
sammy 114,861 0.04%
weblogic 114,051 0.04%
bot 112,913 0.04%
upload 109,495 0.04%
public 108,153 0.04%
kafka 107,786 0.04%
testing 107,348 0.04%