Threat Level: green Handler on Duty: Bojan Zdrnja

SANS ISC: SSH Scanning Activity - SANS Internet Storm Center SSH Scanning Activity


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Please help us make this page better by submitting your own data. For details on how to submit your data see our diary blog post announcing this feature. https://github.com/jkakavas/kippo-pyshield

We now offer a Raspberry Pi setup! For instructions read our diary blog post announcing it and/or our later diary blog post explaining how to run a DShield Sensor inside docker on RasPi.

Top 10 Usernames Attempted Today
Username Attempts Percent
admin 1,102,403 62.94%
root 318,866 18.20%
user 21,624 1.23%
guest 16,401 0.94%
enable 14,812 0.85%
sh 14,432 0.82%
adm 14,375 0.82%
system 14,356 0.82%
Administrator 11,631 0.66%
supervisor 8,957 0.51%
View More
Top 10 Usernames Attempted This Month
Username Attempts Percent
admin 29,795,511 39.75%
root 21,047,321 28.08%
sh 2,087,217 2.78%
system 1,939,055 2.59%
support 1,352,221 1.80%
enable 1,106,454 1.48%
guest 1,063,156 1.42%
user 1,031,627 1.38%
>/var/.ptmx && cd /var/ 969,815 1.29%
shell 826,636 1.10%
View More
Top 20 Usernames Attempted This Year
Username Attempts Percent
admin 170,630,140 32.24%
root 140,723,873 26.59%
system 18,726,377 3.54%
sh 18,060,927 3.41%
enable 15,053,663 2.84%
shell 12,048,679 2.28%
>/var/.ptmx && cd /var/ 10,307,335 1.95%
>/mnt/.ptmx && cd /mnt/ 8,435,052 1.59%
>/var/tmp/.ptmx && cd /var/tmp/ 8,352,268 1.58%
>/dev/netslink/.ptmx && cd /dev/netslink/ 8,347,481 1.58%
>/bin/.ptmx && cd /bin/ 8,346,789 1.58%
>/boot/.ptmx && cd /boot/ 8,345,429 1.58%
guest 6,891,037 1.30%
support 6,457,712 1.22%
enable 5,921,503 1.12%
user 5,224,356 0.99%
default 3,008,391 0.57%
shell 2,803,487 0.53%
/bin/busybox rm -rf 19ju3d 902i13 2,304,633 0.44%
adm 2,213,532 0.42%
View More
Usernames Attempted This Year By Character Length
Length Attempts Percent
1 523,159 0.10%
2 21,008,518 3.97%
3 6,420,976 1.21%
4 151,817,990 28.68%
5 183,500,662 34.67%
6 47,555,336 8.98%
7 28,939,722 5.47%
8 2,135,932 0.40%
9 2,172,056 0.41%
10 4,435,885 0.84%
11 748,765 0.14%
12 609,968 0.12%
13 1,952,488 0.37%
14 251,338 0.05%
15 1,811,202 0.34%
16 95,986 0.02%
17 105,566 0.02%
18 11,888 0.00%
19 65,311 0.01%
20 106,350 0.02%