Threat Level: green Handler on Duty: Rob VandenBrink

SANS ISC: SSH Scanning Activity - Internet Security | DShield SSH Scanning Activity


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Please help us make this page better by submitting your own data. For details on how to submit your data see our diary blog post announcing this feature. https://github.com/jkakavas/kippo-pyshield

We now offer a Raspberry Pi setup! For instructions read our diary blog post announcing it and/or our later diary blog post explaining how to run a DShield Sensor inside docker on RasPi.

Top 10 Usernames Attempted Today
Username Attempts Percent
root 642,305 41.60%
admin 365,910 23.70%
system 52,407 3.39%
sh 39,756 2.58%
guest 35,273 2.28%
support 34,495 2.23%
enable 29,834 1.93%
>/var/.ptmx && cd /var/ 28,617 1.85%
user 26,180 1.70%
>/mnt/.ptmx && cd /mnt/ 21,544 1.40%
View More
Top 10 Usernames Attempted This Month
Username Attempts Percent
root 24,819,091 38.33%
admin 18,552,694 28.65%
system 1,654,218 2.55%
sh 1,517,333 2.34%
support 1,431,412 2.21%
user 1,205,529 1.86%
guest 1,166,374 1.80%
enable 993,613 1.53%
>/var/.ptmx && cd /var/ 948,193 1.46%
>/mnt/.ptmx && cd /mnt/ 762,680 1.18%
View More
Top 20 Usernames Attempted This Year
Username Attempts Percent
root 107,302,251 29.06%
admin 91,010,866 24.65%
system 14,633,374 3.96%
sh 14,305,945 3.87%
enable 11,669,973 3.16%
shell 9,458,776 2.56%
>/var/.ptmx && cd /var/ 8,526,364 2.31%
>/mnt/.ptmx && cd /mnt/ 7,263,511 1.97%
>/var/tmp/.ptmx && cd /var/tmp/ 7,193,778 1.95%
>/dev/netslink/.ptmx && cd /dev/netslink/ 7,189,335 1.95%
>/bin/.ptmx && cd /bin/ 7,188,632 1.95%
>/boot/.ptmx && cd /boot/ 7,187,358 1.95%
support 5,673,647 1.54%
guest 5,384,187 1.46%
enable 4,402,476 1.19%
user 4,191,773 1.14%
shell 2,188,381 0.59%
/bin/busybox rm -rf 19ju3d 902i13 2,122,703 0.57%
default 2,117,646 0.57%
/bin/busybox rm -rf NiGGeR69xd dropper 1,246,186 0.34%
View More
Usernames Attempted This Year By Character Length
Length Attempts Percent
1 250,483 0.07%
2 16,175,054 4.38%
3 3,869,174 1.05%
4 115,001,456 31.15%
5 100,873,568 27.32%
6 35,141,274 9.52%
7 22,546,349 6.11%
8 1,559,829 0.42%
9 1,866,410 0.51%
10 3,309,697 0.90%
11 379,007 0.10%
12 468,797 0.13%
13 1,145,610 0.31%
14 192,175 0.05%
15 1,593,936 0.43%
16 84,017 0.02%
17 77,379 0.02%
18 9,460 0.00%
19 56,318 0.02%
20 99,284 0.03%