Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: SSH Scanning Activity SSH Scanning Activity

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Top 50 Usernames Attempted This Month
Username Attempts Percent
root 42,540,381 36.46%
admin 33,275,704 28.52%
sh 2,857,327 2.45%
guest 2,366,402 2.03%
support 2,202,569 1.89%
system 2,188,496 1.88%
user 1,668,670 1.43%
enable 1,594,815 1.37%
>/var/.ptmx && cd /var/ 1,376,117 1.18%
enable 1,329,632 1.14%
shell 1,233,560 1.06%
default 1,179,128 1.01%
>/mnt/.ptmx && cd /mnt/ 1,170,677 1.00%
>/var/tmp/.ptmx && cd /var/tmp/ 1,161,751 1.00%
>/dev/netslink/.ptmx && cd /dev/netslink/ 1,161,104 1.00%
>/bin/.ptmx && cd /bin/ 1,161,022 0.99%
>/boot/.ptmx && cd /boot/ 1,160,943 0.99%
ping ; sh 698,445 0.60%
Administrator 589,863 0.51%
supervisor 543,709 0.47%
ubnt 423,409 0.36%
test 367,727 0.32%
service 302,137 0.26%
adm 286,274 0.25%
admin1 261,942 0.22%
mother 259,173 0.22%
tech 258,715 0.22%
666666 258,591 0.22%
888888 258,223 0.22%
shell 256,860 0.22%
shell\x00 251,670 0.22%
enable\x00 245,482 0.21%
/bin/busybox rm -rf NiGGeR69xd dropper 228,878 0.20%
/bin/busybox rm -rf 19ju3d 902i13 211,964 0.18%
nproc 207,133 0.18%
>/tmp/.ptmx && cd /tmp/ 175,889 0.15%
pi 168,159 0.14%
22 167,454 0.14%
>/.ptmx && cd / 166,462 0.14%
>/dev/shm/.ptmx && cd /dev/shm/ 166,451 0.14%
>/usr/.ptmx && cd /usr/ 166,431 0.14%
>/etc/.ptmx && cd /etc/ 166,427 0.14%
>/dev/.ptmx && cd /dev/ 165,954 0.14%
>/var/run/.ptmx && cd /var/run/ 165,786 0.14%
sh 162,112 0.14%
wlahh 156,228 0.13%
1234 155,649 0.13%
111111 155,230 0.13%
/bin/busybox rm -rf nya oxdedfgt 150,123 0.13%
/bin/busybox rm -rf SO190Ij1X dropper 126,887 0.11%