Threat Level: green Handler on Duty: Rick Wanner

SANS ISC: SSH Scanning Activity - SANS Internet Storm Center SSH Scanning Activity


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Top 100 Passwords Attempted This Year
Password Attempts Percent
admin 15,828,878 6.31%
shell 10,873,807 4.34%
12345 8,084,807 3.22%
7ujMko0admin 7,580,600 3.02%
password 7,416,309 2.96%
vizxv 7,059,428 2.82%
default 6,866,301 2.74%
support 6,158,458 2.46%
anko 5,502,437 2.19%
hunt5759 5,346,493 2.13%
user 5,041,968 2.01%
>/tmp/.ptmx && cd /tmp/ 4,691,963 1.87%
system\x00 4,537,336 1.81%
sh\x00 4,002,616 1.60%
>/dev/.ptmx && cd /dev/ 3,905,219 1.56%
1234 3,391,103 1.35%
>/var/run/.ptmx && cd /var/run/ 3,339,072 1.33%
>/.ptmx && cd / 3,304,626 1.32%
>/dev/shm/.ptmx && cd /dev/shm/ 3,304,397 1.32%
>/etc/.ptmx && cd /etc/ 3,304,344 1.32%
>/usr/.ptmx && cd /usr/ 3,304,221 1.32%
xc3511 3,267,571 1.30%
1001chin 3,114,147 1.24%
changeme 3,043,065 1.21%
system 2,734,097 1.09%
123456 2,708,511 1.08%
sh 2,452,771 0.98%
5up 1,967,967 0.78%
antslq 1,949,828 0.78%
zlxx. 1,802,304 0.72%
ubnt 1,797,869 0.72%
1111 1,784,632 0.71%
pass 1,679,890 0.67%
ipcam_rt5350 1,663,026 0.66%
guest 1,610,573 0.64%
1234567890 1,460,630 0.58%
54321 1,459,798 0.58%
888888 1,438,203 0.57%
aerohive 1,405,482 0.56%
hi3518 1,364,912 0.54%
root 1,302,274 0.52%
xmhdipc 1,216,478 0.49%
Zte521 1,148,969 0.46%
/bin/busybox cp /bin/busybox NiGGeR69xd; >NiGGeR69xd; /bin/busybox chmod 777 NiGGeR69xd; /bin/busybox SORA 1,128,021 0.45%
t0talc0ntr0l4! 1,126,871 0.45%
cat1029 1,113,050 0.44%
/bin/busybox ECCHI 1,091,609 0.44%
/bin/busybox daddyl33t 1,080,109 0.43%
zsun1188 1,029,308 0.41%
jvbzd 1,025,808 0.41%
sh 1,007,433 0.40%
aquario 997,197 0.40%
juantech 977,670 0.39%
linuxshell 963,912 0.38%
vertex25ektks123 907,408 0.36%
ttnet 839,628 0.33%
klv1234 803,718 0.32%
system 762,491 0.30%
1234qwer 760,678 0.30%
abc123 758,260 0.30%
666666 720,301 0.29%
/bin/busybox cp /bin/busybox 19ju3d; >19ju3d; /bin/busybox chmod 777 19ju3d; /bin/busybox AK1K2 674,322 0.27%
admin123 670,647 0.27%
admin1234 665,243 0.27%
/bin/busybox OWARI 653,067 0.26%
synnet 640,114 0.26%
GM8182 636,189 0.25%
00000000 599,222 0.24%
oelinux123 567,476 0.23%
smcadmin 567,009 0.23%
ikwb 564,411 0.23%
20080826 553,176 0.22%
7ujMko0vizxv 536,295 0.21%
123123 535,093 0.21%
meinsm 528,796 0.21%
klv123 527,936 0.21%
>/var/.misa && cd /var/ 523,974 0.21%
service 522,574 0.21%
OxhlwSG8 516,967 0.21%
1 510,039 0.20%
123 507,358 0.20%
88888888 496,000 0.20%
>/mnt/.misa && cd /mnt/ 478,835 0.19%
>/var/tmp/.misa && cd /var/tmp/ 476,922 0.19%
>/dev/netslink/.misa && cd /dev/netslink/ 476,840 0.19%
>/bin/.misa && cd /bin/ 476,752 0.19%
>/boot/.misa && cd /boot/ 476,626 0.19%
S2fGqNFs 470,678 0.19%
/bin/busybox iDdosYou 470,108 0.19%
& 463,406 0.18%
/bin/busybox rm -rf HOHO-U79OL HOHO-9Y8G6 459,095 0.18%
telnet 449,723 0.18%
12345678 441,593 0.18%
realtek 437,514 0.17%
4321 435,643 0.17%
ho4uku6at 433,095 0.17%
Serv4EMC 411,312 0.16%
dreambox 406,971 0.16%
/bin/busybox yami 398,643 0.16%
alpine 384,791 0.15%