Threat Level: green Handler on Duty: Jim Clausing

SANS ISC: SSH Scanning Activity SSH Scanning Activity

Participate: Learn more about our honeypot network
https://isc.sans.edu/honeypot.html

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Top 50 Usernames Attempted This Month
Username Attempts Percent
root 70,872,762 43.97%
admin 37,510,473 23.27%
guest 3,442,407 2.14%
user 2,991,601 1.86%
support 2,654,275 1.65%
sh 2,215,844 1.37%
system 2,039,653 1.27%
enable 1,333,509 0.83%
test 1,225,157 0.76%
>/var/.ptmx && cd /var/ 1,071,125 0.66%
shell 955,260 0.59%
>/mnt/.ptmx && cd /mnt/ 851,992 0.53%
>/var/tmp/.ptmx && cd /var/tmp/ 845,919 0.52%
>/dev/netslink/.ptmx && cd /dev/netslink/ 845,717 0.52%
>/bin/.ptmx && cd /bin/ 845,574 0.52%
>/boot/.ptmx && cd /boot/ 845,403 0.52%
enable 789,286 0.49%
ubnt 712,210 0.44%
default 665,018 0.41%
Administrator 660,841 0.41%
nproc 650,255 0.40%
supervisor 417,468 0.26%
admin1 285,554 0.18%
service 273,818 0.17%
oracle 265,590 0.16%
tech 253,923 0.16%
adm 249,910 0.16%
enable\x00 214,018 0.13%
pi 200,865 0.12%
666666 199,884 0.12%
888888 196,988 0.12%
22 195,435 0.12%
ubuntu 194,503 0.12%
shell\x00 194,487 0.12%
mother 194,034 0.12%
shell 180,975 0.11%
postgres 180,531 0.11%
1234 156,328 0.10%
ftpuser 152,179 0.09%
system 145,805 0.09%
/bin/busybox rm -rf nya oxdedfgt 143,110 0.09%
nagios 141,456 0.09%
bah 137,089 0.09%
demo 136,913 0.08%
web 134,447 0.08%
ftp 128,773 0.08%
tomcat 127,853 0.08%
111111 125,338 0.08%
user1 124,062 0.08%
git 123,212 0.08%