[Sentinel/US-West] #opencanary analysis for yesterday
-
[Sentinel/US-West] #opencanary analysis for yesterday
Summary:
Total Connection Attempts: 33945
Unique Usernames: 168
Distinct Passwords: 404
Unique Attacker IPs: 621Port Popularity (Port / Count):
οΈ VNC: 12154
οΈ RDP: 11645
οΈ MSSQL: 5102
SSH: 4258
οΈ SMB: 504
Telnet: 222
MySQL: 38
REDIS: 19
FTP: 2
HTTP: 1Top 10 Usernames (Username / Count):
35: 3763
hello: 2540
root: 269
admin: 168
ubuntu: 119
debian: 88
user: 49
test: 22
postgres: 19
deploy: 19Top 10 Passwords (Password / Count):
123456: 37
admin: 28
1234: 23
password: 22
kjashd123sadhj123d1SS: 18
Aa123456: 15
default: 13
ubuntu: 12
root: 12
1qaz@WSX: 11Top 10 Attacker IPs (IP / Count):
118.160.151.xxx: 3266
106.0.54.xxx: 1873
54.151.176.xxx: 1736
113.77.236.xxx: 1452
127.0.0.xxx: 1436
60.165.119.xxx: 856
8.26.21.xxx: 678
45.227.254.xxx: 600
173.249.206.xxx: 422
205.209.99.xxx: 383The OpenCanary Experience is at https://www.toce.ch

-
R relay@relay.infosec.exchange shared this topic