The statistics are generated periodically. The ones below have been generated 50 weeks ago.
Session:
Two consecutive attempts from the same IP address belong to two distinct
sessions if they are separated by more than 60 minutes.
Break-in:
Here, a break-in is a successful attempt (the login/password combination
worked) and the SSH client used while breaking in does not contain "libssh".
| General | |
|---|---|
| Total attempts | 74,661,386 |
| Total attackers | 257,705 |
| Total sessions | 1,225,203 |
| Different users | 267,928 |
| Different passwords | 1,178,414 |
| Different combinations | 1,823,466 |
| Attempts/Session | 60.9 |
| Attempts/Attacker | 289.7 |
| Sessions/Attacker | 4.8 |
| Miscellaneous | |
|---|---|
| login = password | 7.5% |
| login is "root" | 79.0% |
| Countries of real break-in | |
|---|---|
| China | 2 |
Top 5
| Logins / Passwords | |||
|---|---|---|---|
| N | Login | Password | Count |
| 1 | usuario | usuario | 311,144 |
| 2 | admin | admin | 226,420 |
| 3 | root | password | 222,633 |
| 4 | root | root | 217,070 |
| 5 | root | admin | 213,744 |
| 6 | root | 123456 | 193,354 |
| 7 | root | 1234 | 179,139 |
| 8 | Admin | 1234 | 171,181 |
| 9 | admin | password | 170,029 |
| 10 | root | 12345 | 167,308 |
| 11 | Admin | 12345 | 153,311 |
| 12 | admin | admin123 | 146,973 |
| 13 | root | 111111 | 141,165 |
| 14 | admin | admin1234 | 137,148 |
| 15 | admin | admin1 | 136,612 |
| 16 | root | 134,156 | |
| 17 | root | 000000 | 130,165 |
| 18 | root | system | 128,283 |
| 19 | root | 0000 | 126,954 |
| 20 | root | dreambox | 124,209 |
| Logins | ||
|---|---|---|
| N | Login | Count |
| 1 | root | 58,977,993 |
| 2 | admin | 2,377,394 |
| 3 | user | 478,572 |
| 4 | test | 410,572 |
| 5 | usuario | 360,447 |
| 6 | ubuntu | 211,992 |
| 7 | oracle | 193,630 |
| 8 | support | 159,658 |
| 9 | ubnt | 152,231 |
| 10 | guest | 139,282 |
| 11 | ftpuser | 135,256 |
| 12 | postgres | 134,232 |
| 13 | administrator | 106,203 |
| 14 | git | 91,384 |
| 15 | debian | 88,656 |
| 16 | pi | 86,959 |
| 17 | user1 | 84,126 |
| 18 | nagios | 79,074 |
| 19 | default | 76,340 |
| 20 | mysql | 67,674 |
| Passwords | ||
|---|---|---|
| N | Password | Count |
| 1 | 123456 | 1,292,817 |
| 2 | password | 714,408 |
| 3 | 1234 | 576,559 |
| 4 | admin | 574,353 |
| 5 | 12345 | 515,935 |
| 6 | 123 | 454,010 |
| 7 | root | 397,359 |
| 8 | usuario | 316,090 |
| 9 | admin123 | 247,409 |
| 10 | 240,983 | |
| 11 | test | 216,964 |
| 12 | 1 | 204,712 |
| 13 | ubnt | 200,032 |
| 14 | 111111 | 194,707 |
| 15 | admin1 | 188,321 |
| 16 | 12345678 | 168,423 |
| 17 | admin1234 | 158,310 |
| 18 | qwerty | 157,459 |
| 19 | system | 140,460 |
| 20 | p@ssw0rd | 140,026 |
Filter:
Daily distribution of attacks
Hourly distribution of attacks
