Threat Level: green Handler on Duty: Bojan Zdrnja

SANS ISC: Uptick in ssh login attempts with usernames pi and ubnt SANS ISC InfoSec Forums

Watch ISC TV. Great for NOCs, SOCs and Living Rooms: https://isctv.sans.edu

Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!
Uptick in ssh login attempts with usernames pi and ubnt
Anyone else seeing an uptick in ssh login attempts with the usernames of pi and ubnt? 34 for ubnt and 38 for pi in the last 24 hours. 290 for pi and 0 for ubnt in the previous 24 hours. geeknik

7 Posts
hi Geeknik,

yup, seeing them too: 4 attempts at ubnt, 4 at pi and 4 at root from each host. interestingly, all the hosts matching this pattern also participated in the recent distributed `D-link/admin/ftpuser/root' scans (see Jim's diary on 2014/14/10).

--
juan
Anonymous

-

Sign Up for Free or Log In to start participating in the conversation!