[Sentinel/US-West] #opencanary analysis for yesterday

[toce@infosec.exchange]

[Sentinel/US-West] #opencanary analysis for yesterday

Summary:
Total Connection Attempts: 58242
Unique Usernames: 338
Distinct Passwords: 365
Unique Attacker IPs: 867

Port Popularity (Port / Count):
️ RDP: 28099
️ MSSQL: 10222
️ VNC: 8757
SSH: 6021
️ SMB: 4298
Telnet: 798
REDIS: 41
MySQL: 3
HTTP: 2
FTP: 1

Top 10 Usernames (Username / Count):
35: 14461
hello: 1576
root: 758
admin: 401
ubuntu: 128
debian: 115
user: 102
default: 101
administr: 90
test: 35

Top 10 Passwords (Password / Count):
123456: 73
default: 57
admin: 50
S2fGqNFs: 40
root: 39
password: 37
xc3511: 34
1111: 33
pass: 27
1234: 27

Top 10 Attacker IPs (IP / Count):
104.192.6.xxx: 9948
103.155.168.xxx: 2867
47.129.236.xxx: 1666
127.0.0.xxx: 1437
45.227.254.xxx: 1330
196.64.232.xxx: 1128
103.182.228.xxx: 669
8.26.21.xxx: 578
152.53.177.xxx: 485
119.8.155.xxx: 419

The OpenCanary Experience is at https://www.toce.ch