Threat Level: green Handler on Duty: Didier Stevens

SANS ISC: SSH Scanning Activity - Internet Security | DShield SSH Scanning Activity


Sign Up for Free!   Forgot Password?
Log In or Sign Up for Free!

Please help us make this page better by submitting your own data. For details on how to submit your data see our diary blog post announcing this feature. https://github.com/jkakavas/kippo-pyshield

We now offer a Raspberry Pi setup! For instructions read our diary blog post announcing it and/or our later diary blog post explaining how to run a DShield Sensor inside docker on RasPi.

Top 10 Usernames Attempted Today
Username Attempts Percent
admin 1,150,491 62.35%
root 357,981 19.40%
enable 27,373 1.48%
system 21,712 1.18%
shell 19,714 1.07%
sh 18,001 0.98%
guest 15,314 0.83%
adm 10,624 0.58%
>/var/.ptmx && cd /var/ 10,441 0.57%
administrator 9,164 0.50%
View More
Top 10 Usernames Attempted This Month
Username Attempts Percent
admin 16,657,162 34.46%
root 14,843,211 30.71%
system 1,645,358 3.40%
sh 1,390,209 2.88%
enable 823,206 1.70%
>/var/.ptmx && cd /var/ 658,330 1.36%
shell 648,875 1.34%
support 630,696 1.30%
guest 604,286 1.25%
enable 601,994 1.25%
View More
Top 20 Usernames Attempted This Year
Username Attempts Percent
admin 142,742,042 29.41%
root 132,781,057 27.36%
system 18,337,183 3.78%
sh 17,746,212 3.66%
enable 14,418,309 2.97%
shell 11,589,738 2.39%
>/var/.ptmx && cd /var/ 10,146,684 2.09%
>/mnt/.ptmx && cd /mnt/ 8,330,032 1.72%
>/var/tmp/.ptmx && cd /var/tmp/ 8,249,665 1.70%
>/dev/netslink/.ptmx && cd /dev/netslink/ 8,245,061 1.70%
>/bin/.ptmx && cd /bin/ 8,244,344 1.70%
>/boot/.ptmx && cd /boot/ 8,243,084 1.70%
guest 6,515,850 1.34%
support 6,288,469 1.30%
enable 5,730,795 1.18%
user 5,020,011 1.03%
default 2,802,464 0.58%
shell 2,682,632 0.55%
/bin/busybox rm -rf 19ju3d 902i13 2,290,784 0.47%
adm 1,892,915 0.39%
View More
Usernames Attempted This Year By Character Length
Length Attempts Percent
1 455,914 0.09%
2 20,401,078 4.20%
3 5,786,146 1.19%
4 143,057,015 29.48%
5 154,895,101 31.92%
6 45,339,129 9.34%
7 27,603,298 5.69%
8 2,000,340 0.41%
9 2,116,447 0.44%
10 4,185,408 0.86%
11 695,191 0.14%
12 582,478 0.12%
13 1,713,386 0.35%
14 230,927 0.05%
15 1,786,320 0.37%
16 92,512 0.02%
17 94,626 0.02%
18 10,767 0.00%
19 62,133 0.01%
20 105,068 0.02%