Skip to content

Instantly share code, notes, and snippets.

@felmoltor
Created April 2, 2016 15:39
Show Gist options
  • Star 1 You must be signed in to star a gist
  • Fork 0 You must be signed in to fork a gist
  • Save felmoltor/237f19f6ca0527bff51f3a26270a39a0 to your computer and use it in GitHub Desktop.
Save felmoltor/237f19f6ca0527bff51f3a26270a39a0 to your computer and use it in GitHub Desktop.
Honeypot - Top scanners,countries and user/passwords used
====================
= Top 15 source IP =
====================
103.41.124.12:6480 (Hong Kong)
103.41.124.53:6363 (Hong Kong)
103.41.124.19:5809 (Hong Kong)
112.171.173.137:1691 (Korea, Republic of)
222.186.21.82:1596 (China)
117.27.249.4:1470 (China)
222.186.56.171:1302 (China)
122.225.109.126:1177 (China)
81.31.166.193:1010 (Iran, Islamic Republic of)
122.225.109.112:847 (China)
58.211.16.74:842 (China)
222.186.56.33:790 (China)
122.225.109.210:783 (China)
61.147.103.135:700 (China)
45.34.102.197:677 ()
=========================
= Top 15 source class C =
=========================
103.41.124.0/24:18654 (Hong Kong)
122.225.109.0/24:7986 (China)
222.186.21.0/24:5935 (China)
61.174.51.0/24:5019 (China)
222.186.56.0/24:2716 (China)
122.225.97.0/24:2664 (China)
58.218.204.0/24:2287 (China)
112.171.173.0/24:1691 (Korea, Republic of)
117.27.249.0/24:1470 (China)
61.174.50.0/24:1131 (China)
81.31.166.0/24:1010 (Iran, Islamic Republic of)
122.225.103.0/24:986 (China)
218.2.0.0/24:893 (China)
58.211.16.0/24:842 (China)
60.169.77.0/24:735 (China)
==========================
= Top 30 user/passwords =
==========================
473 ubnt/ubnt
428 root/admin
389 admin/admin
225 admin/
191 root/root
183 root/123456
120 root/password
115 admin/password
109 support/support
99 root/abcd1234
97 root/12qwaszx
96 admin/1234
93 test/test
91 root/1qazXSW@
90 guest/guest
88 root/1q2w3e4r5t6y
86 root/Qwer1234
86 root/abcd@123
86 root/1q2w3e
85 root/PassWord
85 root/1a2s3d4f
82 root/123456789
81 admin/123456
80 root/ans#150
79 root/changeme
79 root/a1b2c3d4
79 root/1122334455
79 admin/12345
78 root/
77 root/qwer1234
===================
= Top 30 users =
===================
57355 root
3629 admin
516 ubnt
325 oracle
282 test
182 support
180 guest
160 user
101 pi
85 postgres
84 mysql
76 tomcat
75 ftpuser
69 apache
67 www
63 git
56 toor
53 nagios
51 info
50 linux
47 hadoop
46 teamspeak
46 ftp
46 administrator
43 PlcmSpIp
42 testuser
41
35 webmaster
34 operator
34 adm
=======================
= Top 30 passwords =
=======================
878 admin
640
486 ubnt
396 123456
304 root
296 password
197 12345
195 1234
185 test
148 default
140 support
128 123
127 abcd1234
119 cisco
119 1q2w3e
114 oracle
113 toor
113 1qaz2wsx
108 1234567890
108 123123
107 1q2w3e4r
103 changeme
102 12345678
101 guest
101 abc123
98 root123
98 qwe123
98 12qwaszx
97 admin123
96 123456789
=======================
= Last 15 users =
=======================
admin (2016-04-02 09:40:35+0200)
admin (2016-04-02 09:48:23+0200)
support (2016-04-02 10:10:39+0200)
support (2016-04-02 10:10:40+0200)
support (2016-04-02 10:10:40+0200)
support (2016-04-02 11:53:41+0200)
support (2016-04-02 11:53:41+0200)
support (2016-04-02 11:53:42+0200)
support (2016-04-02 14:37:51+0200)
support (2016-04-02 14:37:51+0200)
support (2016-04-02 14:37:51+0200)
admin (2016-04-02 15:21:51+0200)
ubnt (2016-04-02 16:20:40+0200)
admin (2016-04-02 16:21:27+0200)
test (2016-04-02 16:24:03+0200)
=======================
= Last 15 passwords =
=======================
admin (2016-04-02 09:40:35+0200)
admin (2016-04-02 09:48:23+0200)
support (2016-04-02 10:10:39+0200)
(2016-04-02 10:10:40+0200)
support (2016-04-02 10:10:40+0200)
support (2016-04-02 11:53:41+0200)
(2016-04-02 11:53:41+0200)
support (2016-04-02 11:53:42+0200)
support (2016-04-02 14:37:51+0200)
(2016-04-02 14:37:51+0200)
support (2016-04-02 14:37:51+0200)
admin (2016-04-02 15:21:51+0200)
ubnt (2016-04-02 16:20:40+0200)
admin (2016-04-02 16:21:27+0200)
test (2016-04-02 16:24:03+0200)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment