The statistics are generated periodically. The ones below have been generated 5 weeks ago.
Session:
Two consecutive attempts from the same IP address belong to two distinct
sessions if they are separated by more than 60 minutes.
Break-in:
Here, a break-in is a successful attempt (the login/password combination
worked) and the SSH client used while breaking in does not contain "libssh".
| General | |
|---|---|
| Total attempts | 87,015,025 |
| Total attackers | 301,618 |
| Total sessions | 1,583,210 |
| Different users | 282,223 |
| Different passwords | 1,298,333 |
| Different combinations | 2,110,982 |
| Attempts/Session | 55.0 |
| Attempts/Attacker | 288.5 |
| Sessions/Attacker | 5.2 |
| Miscellaneous | |
|---|---|
| login = password | 7.9% |
| login is "root" | 77.1% |
| Countries of real break-in | |
|---|---|
| China | 2 |
Top 5
| Logins / Passwords | |||
|---|---|---|---|
| N | Login | Password | Count |
| 1 | usuario | usuario | 314,272 |
| 2 | root | password | 253,025 |
| 3 | root | root | 242,727 |
| 4 | admin | admin | 241,683 |
| 5 | root | admin | 238,142 |
| 6 | root | 123456 | 216,643 |
| 7 | root | 1234 | 198,387 |
| 8 | root | 12345 | 184,399 |
| 9 | Admin | 1234 | 181,910 |
| 10 | admin | password | 178,563 |
| 11 | root | 174,373 | |
| 12 | Admin | 12345 | 158,104 |
| 13 | admin | admin123 | 155,125 |
| 14 | root | 111111 | 153,884 |
| 15 | admin | admin1 | 138,799 |
| 16 | admin | admin1234 | 138,727 |
| 17 | root | 000000 | 134,809 |
| 18 | root | system | 132,792 |
| 19 | root | 0000 | 129,440 |
| 20 | root | dreambox | 126,947 |
| Logins | ||
|---|---|---|
| N | Login | Count |
| 1 | root | 67,128,032 |
| 2 | admin | 2,768,362 |
| 3 | user | 709,258 |
| 4 | test | 515,941 |
| 5 | ubuntu | 412,858 |
| 6 | usuario | 389,690 |
| 7 | oracle | 270,543 |
| 8 | ftpuser | 204,826 |
| 9 | postgres | 178,982 |
| 10 | support | 173,828 |
| 11 | ubnt | 173,820 |
| 12 | guest | 168,664 |
| 13 | debian | 166,309 |
| 14 | git | 124,205 |
| 15 | administrator | 120,407 |
| 16 | pi | 112,970 |
| 17 | user1 | 107,082 |
| 18 | test1 | 99,883 |
| 19 | mysql | 91,006 |
| 20 | test2 | 88,224 |
| Passwords | ||
|---|---|---|
| N | Password | Count |
| 1 | 123456 | 1,818,073 |
| 2 | password | 820,760 |
| 3 | 1234 | 672,376 |
| 4 | admin | 657,439 |
| 5 | 123 | 614,398 |
| 6 | 12345 | 582,083 |
| 7 | root | 462,832 |
| 8 | usuario | 321,415 |
| 9 | 297,463 | |
| 10 | admin123 | 274,447 |
| 11 | test | 271,189 |
| 12 | 1 | 263,335 |
| 13 | 12345678 | 233,144 |
| 14 | 111111 | 230,551 |
| 15 | ubnt | 213,105 |
| 16 | qwerty | 201,637 |
| 17 | p@ssw0rd | 199,504 |
| 18 | admin1 | 194,914 |
| 19 | 123456789 | 177,522 |
| 20 | admin1234 | 166,008 |
Filter:
Daily distribution of attacks
Hourly distribution of attacks
