[Sentinel/US-West] #opencanary analysis for 20260506-20260512

[toce@infosec.exchange]

[Sentinel/US-West] #opencanary analysis for 20260506-20260512

Summary:
Total Connection Attempts: 274,280
Unique Usernames: 1,791
Distinct Passwords: 1,323
️ Distinct VNC Passwords: 209
Unique Attacker IPs: 4,557

Port Popularity (Port / Count):
️ RDP: 107,464
️ VNC: 82,437
SSH: 36,741
Telnet: 25,196
️ MSSQL: 15,897
️ SMB: 6,054
REDIS: 253
MySQL: 217
FTP: 18
HTTP: 3

Top 10 Usernames (Value / Count):
Usernames 35: 50,785
Usernames root: 18,531
Usernames admin: 5,423
Usernames hello: 2,886
Usernames support: 889
Usernames user: 829
Usernames ubuntu: 449
Usernames guest: 429
Usernames test: 317
Usernames deploy: 307

Top 10 Passwords (Value / Count):
Passwords admin: 2,809
Passwords xc3511: 1,735
Passwords 123456: 1,518
Passwords vizxv: 1,490
Passwords password: 1,170
Passwords 888888: 1,034
Passwords default: 1,004
Passwords 12345: 927
Passwords 1111: 910
Passwords support: 868

Top 10 ️ VNC Passwords (Value / Count):
️ VNC Passwords <Password was not in the common list>: 81,854
️ VNC Passwords password123: 58
️ VNC Passwords iloveyou: 30
️ VNC Passwords 123456: 20
️ VNC Passwords admin: 16
️ VNC Passwords 1234567890: 16
️ VNC Passwords 111111: 15
️ VNC Passwords P@ssword: 13
️ VNC Passwords P@55w0rd: 12
️ VNC Passwords football: 12

Top 10 Attacker IPs (IP / Count):
127.0.0.xxx: 10,041
134.195.101.xxx: 6,606
119.8.155.xxx: 4,099
77.90.185.xxx: 4,084
8.26.21.xxx: 3,992
47.129.236.xxx: 3,687
123.146.82.xxx: 3,234
50.6.3.xxx: 2,802
135.148.33.xxx: 2,457
188.253.11.xxx: 2,276

The OpenCanary Experience is at https://www.toce.ch