Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: SSH Scanning Activity - SANS Internet Storm Center SSH Scanning Activity


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Please help us make this page better by submitting your own data. For details on how to submit your data see our diary blog post announcing this feature. https://github.com/jkakavas/kippo-pyshield

We now offer a Raspberry Pi setup! For instructions read our diary blog post announcing it and/or our later diary blog post explaining how to run a DShield Sensor inside docker on RasPi.

Top 10 Usernames Attempted Today
Username Attempts Percent
root 707,551 26.09%
admin 650,573 23.99%
sh 138,700 5.11%
enable 126,122 4.65%
enable 82,412 3.04%
shell 79,919 2.95%
system 70,584 2.60%
>/var/.ptmx && cd /var/ 58,245 2.15%
>/var/tmp/.ptmx && cd /var/tmp/ 50,335 1.86%
>/mnt/.ptmx && cd /mnt/ 50,325 1.86%
View More
Top 10 Usernames Attempted This Month
Username Attempts Percent
root 13,427,399 36.10%
admin 6,646,652 17.87%
sh 2,184,070 5.87%
enable 1,568,764 4.22%
enable 1,038,127 2.79%
system 856,020 2.30%
shell 735,932 1.98%
>/var/.ptmx && cd /var/ 676,864 1.82%
enable\x00 630,780 1.70%
>/mnt/.ptmx && cd /mnt/ 614,763 1.65%
View More
Top 20 Usernames Attempted This Year
Username Attempts Percent
root 141,364,561 42.91%
admin 49,165,224 14.92%
sh 14,175,248 4.30%
system 9,393,619 2.85%
enable 8,255,923 2.51%
support 8,076,617 2.45%
user 6,399,569 1.94%
>/var/.ptmx && cd /var/ 5,551,521 1.69%
guest 4,867,179 1.48%
enable 4,861,932 1.48%
>/mnt/.ptmx && cd /mnt/ 4,705,687 1.43%
>/var/tmp/.ptmx && cd /var/tmp/ 4,665,097 1.42%
>/dev/netslink/.ptmx && cd /dev/netslink/ 4,664,405 1.42%
>/bin/.ptmx && cd /bin/ 4,663,731 1.42%
>/boot/.ptmx && cd /boot/ 4,662,932 1.42%
enable\x00 4,652,524 1.41%
shell\x00 4,142,716 1.26%
shell 4,020,849 1.22%
default 2,232,315 0.68%
/bin/busybox rm -rf NiGGeR69xd dropper 1,275,663 0.39%
View More
Usernames Attempted This Year By Character Length
Length Attempts Percent
0 2,434 0.00%
1 249,991 0.08%
2 14,737,218 4.47%
3 1,803,904 0.55%
4 150,853,739 45.79%
5 57,172,918 17.35%
6 26,715,802 8.11%
7 17,806,905 5.41%
8 1,918,099 0.58%
9 5,465,152 1.66%
10 6,110,432 1.85%
11 463,209 0.14%
12 624,942 0.19%
13 1,333,794 0.40%
14 396,807 0.12%
15 1,096,209 0.33%
16 371,585 0.11%
17 92,401 0.03%
18 29,867 0.01%
19 38,124 0.01%