[Sentinel/US-West] #opencanary analysis for yesterday

[toce@infosec.exchange]

[Sentinel/US-West] #opencanary analysis for yesterday

Summary:
Total Connection Attempts: 28474
Unique Usernames: 133
Distinct Passwords: 350
Unique Attacker IPs: 648

Port Popularity (Port / Count):
️ RDP: 11394
️ VNC: 10361
SSH: 2856
️ SMB: 2096
️ MSSQL: 1187
Telnet: 487
REDIS: 46
MySQL: 45
GIT: 1
HTTP: 1

Top 10 Usernames (Username / Count):
35: 3531
hello: 2941
root: 488
admin: 66
ubuntu: 25
test: 25
user: 20
deploy: 18
guest: 14
Test: 13

Top 10 Passwords (Password / Count):
123456: 47
tsgoingon: 23
solokey: 23
taZz@23495859: 23
admin: 22
1234: 18
default: 14
root: 13
1qaz@WSX: 12
admin123: 12

Top 10 Attacker IPs (IP / Count):
106.0.54.xxx: 1784
54.151.176.xxx: 1653
127.0.0.xxx: 1436
45.227.254.xxx: 1294
1.55.211.xxx: 1220
8.26.21.xxx: 720
186.94.180.xxx: 650
190.202.148.xxx: 417
205.209.99.xxx: 368
36.83.143.xxx: 364

The OpenCanary Experience is at https://www.toce.ch