[Sentinel/US-West] #opencanary analysis for yesterday

[toce@infosec.exchange]

[Sentinel/US-West] #opencanary analysis for yesterday

Summary:
Total Connection Attempts: 33518
Unique Usernames: 216
Distinct Passwords: 538
Unique Attacker IPs: 627

Port Popularity (Port / Count):
️ RDP: 13707
️ VNC: 11920
SSH: 4123
️ MSSQL: 2209
️ SMB: 1145
Telnet: 258
MySQL: 125
REDIS: 28
FTP: 3

Top 10 Usernames (Username / Count):
35: 4752
hello: 2750
root: 381
admin: 168
user: 102
ubuntu: 100
debian: 92
dbadmin: 37
test: 14
Administr: 11

Top 10 Passwords (Password / Count):
123456: 38
admin: 26
1234: 24
password: 18
default: 13
123: 11
root: 10
guest: 10
1111: 8
test: 8

Top 10 Attacker IPs (IP / Count):
106.0.54.xxx: 2065
218.5.56.xxx: 1900
54.151.176.xxx: 1849
127.0.0.xxx: 1436
59.185.230.xxx: 1326
8.26.21.xxx: 810
202.60.110.xxx: 733
119.8.155.xxx: 723
45.227.254.xxx: 722
172.236.187.xxx: 574

The OpenCanary Experience is at https://www.toce.ch