Statistics

The statistics are generated periodically. The ones below have been generated 2 hours ago.

Session:
Two consecutive attempts from the same IP address belong to two distinct sessions if they are separated by more than 60 minutes.

Break-in:
Here, a break-in is a successful attempt (the login/password combination worked) and the SSH client used while breaking in does not contain "libssh".

General
Total attempts13,489,665
Total attackers7,961
Total sessions31,519
Different users188,593
Different passwords363,248
Different combinations725,078
Attempts/Session428.0
Attempts/Attacker1,694.5
Sessions/Attacker4.0
Miscellaneous
login = password31.7%
login is "root"33.1%
Countries of real break-in
Romania5
Greece1

Top 5

Logins / Passwords
NLoginPasswordCount
1 root password 16,644
2 root 123456 15,982
3 root root 12,908
4 oracle oracle 11,563
5 test test 11,228
6 root qwerty 10,599
7 root 1q2w3e 10,236
8 root 1234 10,090
9 root redhat 10,076
10 root root123 9,625
11 root abc123 9,349
12 root 12345678 9,068
13 postgres postgres 8,964
14 mysql mysql 8,963
15 root p@ssw0rd 8,236
16 root 1q2w3e4r 8,125
17 user user 8,096
18 root 111111 8,035
19 root passw0rd 7,945
20 root 12345 7,741
Logins
NLoginCount
1 root 4,471,704
2 admin 188,839
3 test 116,100
4 oracle 80,129
5 user 60,528
6 postgres 53,371
7 mysql 50,850
8 guest 50,286
9 ftp 40,339
10 web 37,950
11 nagios 37,424
12 backup 34,992
13 info 33,928
14 webmaster 30,243
15 apache 28,356
16 ftpuser 28,344
17 www 27,696
18 tomcat 23,733
19 bin 23,331
20 testing 23,091
Passwords
NPasswordCount
1 123456 394,324
2 password 198,915
3 1234 124,105
4 12345 96,659
5 123 92,732
6 root 85,168
7 qwerty 68,332
8 test 55,710
9 12345678 51,891
10 changeme 49,866
11 passwd 46,840
12 1q2w3e 41,668
13 abc123 39,227
14 123456789 36,938
15 1q2w3e4r 35,919
16 654321 35,095
17 admin 33,861
18 1234567 32,329
19 1 31,071
20 1qaz2wsx 30,633
Filter:
Daily distribution of attacks distrib. days of week
Hourly distribution of attacks distrib. hours of day.