[Armada/US-East] #opencanary Samba Access Summary for Mar 20

This OpenCanary received 7 file sample(s) yesterday.

File hashes seen:
► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 7 file(s)
https://www.virustotal.com/gui/file/3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71

List of Usernames:
👤 administrator: 8370 occurrence(s)
👤 admin: 4625 occurrence(s)
👤 hp: 3824 occurrence(s)
👤 user: 726 occurrence(s)
👤 diploma: 373 occurrence(s)
👤 amana_domain: 91 occurrence(s)
👤 admins: 91 occurrence(s)
👤 guest: 12 occurrence(s)
👤 srvasphyxia: 3 occurrence(s)
👤 message: occurrence(s)
👤 message: occurrence(s)
👤 message: occurrence(s)

List of IP Addresses:
🌐 202.58.95.xxx: 13178 occurrence(s)
🌐 103.133.70.xxx: 2552 occurrence(s)
🌐 103.199.208.xxx: 1804 occurrence(s)
🌐 62.240.106.xxx: 460 occurrence(s)
🌐 94.64.79.xxx: 127 occurrence(s)
🌐 113.161.128.xxx: 110 occurrence(s)
🌐 1.55.108.xxx: 88 occurrence(s)
🌐 113.160.206.xxx: 86 occurrence(s)
🌐 203.92.41.xxx: 66 occurrence(s)
🌐 14.235.245.xxx: 66 occurrence(s)
🌐 37.29.15.xxx: 44 occurrence(s)
🌐 203.192.215.xxx: 44 occurrence(s)
🌐 117.244.250.xxx: 44 occurrence(s)
🌐 103.43.78.xxx: 44 occurrence(s)
🌐 103.106.193.xxx: 44 occurrence(s)
🌐 85.95.188.xxx: 22 occurrence(s)
🌐 59.91.22.xxx: 22 occurrence(s)
🌐 45.246.54.xxx: 22 occurrence(s)
🌐 222.252.21.xxx: 22 occurrence(s)
🌐 202.88.244.xxx: 22 occurrence(s)
🌐 202.164.156.xxx: 22 occurrence(s)
🌐 201.187.98.xxx: 22 occurrence(s)
🌐 2.135.121.xxx: 22 occurrence(s)
🌐 190.171.182.xxx: 22 occurrence(s)
🌐 189.111.219.xxx: 22 occurrence(s)
🌐 186.250.22.xxx: 22 occurrence(s)
🌐 186.10.74.xxx: 22 occurrence(s)
🌐 186.10.23.xxx: 22 occurrence(s)
🌐 182.60.233.xxx: 22 occurrence(s)
🌐 181.124.146.xxx: 22 occurrence(s)
🌐 151.80.88.xxx: 22 occurrence(s)
🌐 139.5.157.xxx: 22 occurrence(s)
🌐 123.255.248.xxx: 22 occurrence(s)
🌐 117.240.78.xxx: 22 occurrence(s)
🌐 117.213.20.xxx: 22 occurrence(s)
🌐 111.92.84.xxx: 22 occurrence(s)
🌐 111.92.77.xxx: 22 occurrence(s)
🌐 111.92.62.xxx: 22 occurrence(s)
🌐 111.92.61.xxx: 22 occurrence(s)
🌐 111.248.16.xxx: 22 occurrence(s)
🌐 103.96.40.xxx: 22 occurrence(s)
🌐 103.74.137.xxx: 22 occurrence(s)
🌐 103.172.252.xxx: 22 occurrence(s)
🌐 189.195.132.xxx: 20 occurrence(s)
🌐 111.92.78.xxx: 16 occurrence(s)
🌐 218.250.220.xxx: 11 occurrence(s)
🌐 202.88.237.xxx: 11 occurrence(s)
🌐 14.194.49.xxx: 11 occurrence(s)
🌐 119.236.56.xxx: 11 occurrence(s)
🌐 111.92.20.xxx: 11 occurrence(s)
🌐 202.163.71.xxx: 10 occurrence(s)
🌐 125.20.39.xxx: 10 occurrence(s)
🌐 103.143.10.xxx: 10 occurrence(s)
🌐 59.98.210.xxx: 9 occurrence(s)
🌐 46.105.132.xxx: 5 occurrence(s)
🌐 181.49.36.xxx: 5 occurrence(s)
🌐 122.187.49.xxx: 5 occurrence(s)
🌐 92.205.189.xxx: 3 occurrence(s)
🌐 87.122.68.xxx: 3 occurrence(s)
🌐 71.6.199.xxx: 3 occurrence(s)
🌐 35.216.172.xxx: 3 occurrence(s)
🌐 170.253.26.xxx: 3 occurrence(s)
🌐 93.51.118.xxx: 2 occurrence(s)
🌐 91.243.193.xxx: 2 occurrence(s)
🌐 38.104.249.xxx: 2 occurrence(s)
🌐 37.186.124.xxx: 2 occurrence(s)
🌐 202.143.114.xxx: 2 occurrence(s)
🌐 180.252.92.xxx: 2 occurrence(s)
🌐 177.52.195.xxx: 2 occurrence(s)
🌐 14.102.77.xxx: 2 occurrence(s)
🌐 119.92.151.xxx: 2 occurrence(s)
🌐 117.4.13.xxx: 2 occurrence(s)
🌐 116.107.204.xxx: 2 occurrence(s)
🌐 115.96.217.xxx: 2 occurrence(s)
🌐 111.235.67.xxx: 2 occurrence(s)
🌐 82.204.183.xxx: 1 occurrence(s)
🌐 43.133.162.xxx: 1 occurrence(s)
🌐 34.79.232.xxx: 1 occurrence(s)
🌐 34.76.96.xxx: 1 occurrence(s)
🌐 34.76.203.xxx: 1 occurrence(s)
🌐 171.79.181.xxx: 1 occurrence(s)
🌐 152.32.157.xxx: 1 occurrence(s)
🌐 142.93.129.xxx: 1 occurrence(s)

List of Computers:
🖥️ null: 12241 occurrence(s)
🖥️ 06bf6c5935aa: 5 occurrence(s)
🖥️ shodan: 3 occurrence(s)
🖥️ abuse_xmco_fr: 3 occurrence(s)
🖥️ 159-189-205-92: 3 occurrence(s)
🖥️ windows: 2 occurrence(s)

[Armada/US-East] #opencanary Samba Access Summary for Mar 20

This OpenCanary received 16 file sample(s) yesterday.

File hashes seen:
► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 16 file(s)
https://www.virustotal.com/gui/file/3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71

List of Usernames:
👤 administrator: 907 occurrence(s)
👤 admin: 385 occurrence(s)
👤 guest: 6 occurrence(s)
👤 hp: 3 occurrence(s)
👤 message: occurrence(s)
👤 message: occurrence(s)

List of IP Addresses:
🌐 1.22.230.xxx: 1065 occurrence(s)
🌐 113.177.215.xxx: 471 occurrence(s)
🌐 50.69.172.xxx: 44 occurrence(s)
🌐 58.69.118.xxx: 22 occurrence(s)
🌐 222.124.139.xxx: 22 occurrence(s)
🌐 218.164.136.xxx: 22 occurrence(s)
🌐 117.247.158.xxx: 22 occurrence(s)
🌐 113.186.103.xxx: 22 occurrence(s)
🌐 1.174.193.xxx: 22 occurrence(s)
🌐 220.137.231.xxx: 11 occurrence(s)
🌐 122.116.133.xxx: 11 occurrence(s)
🌐 46.105.132.xxx: 5 occurrence(s)
🌐 35.240.121.xxx: 5 occurrence(s)
🌐 41.199.227.xxx: 2 occurrence(s)
🌐 39.60.146.xxx: 2 occurrence(s)
🌐 201.221.112.xxx: 2 occurrence(s)
🌐 196.188.138.xxx: 2 occurrence(s)
🌐 193.142.144.xxx: 2 occurrence(s)
🌐 150.129.62.xxx: 2 occurrence(s)
🌐 14.99.122.xxx: 2 occurrence(s)
🌐 125.212.158.xxx: 2 occurrence(s)
🌐 122.243.204.xxx: 2 occurrence(s)
🌐 113.188.183.xxx: 2 occurrence(s)
🌐 113.166.63.xxx: 2 occurrence(s)
🌐 102.33.152.xxx: 2 occurrence(s)
🌐 35.195.241.xxx: 1 occurrence(s)
🌐 34.76.96.xxx: 1 occurrence(s)
🌐 207.154.197.xxx: 1 occurrence(s)
🌐 152.32.251.xxx: 1 occurrence(s)

List of Computers:
🖥️ null: 100 occurrence(s)
🖥️ windows: 6 occurrence(s)
🖥️ 06bf6c5935aa: 5 occurrence(s)

[Digger/CH] #opencanary Samba Access Summary for Mar 20

This OpenCanary received 0 file sample(s) yesterday.

File hashes seen:

List of Usernames:
👤 administrator: 46 occurrence(s)
👤 guest: 1 occurrence(s)

List of IP Addresses:
🌐 119.18.144.xxx: 35 occurrence(s)
🌐 59.183.203.xxx: 22 occurrence(s)
🌐 190.186.138.xxx: 22 occurrence(s)
🌐 14.98.168.xxx: 22 occurrence(s)
🌐 110.164.70.xxx: 22 occurrence(s)
🌐 78.85.115.xxx: 2 occurrence(s)
🌐 59.46.133.xxx: 2 occurrence(s)
🌐 39.171.67.xxx: 2 occurrence(s)
🌐 37.34.189.xxx: 2 occurrence(s)
🌐 221.237.122.xxx: 2 occurrence(s)
🌐 188.55.215.xxx: 2 occurrence(s)
🌐 188.43.70.xxx: 2 occurrence(s)
🌐 186.4.140.xxx: 2 occurrence(s)
🌐 181.42.148.xxx: 2 occurrence(s)
🌐 178.134.44.xxx: 2 occurrence(s)
🌐 177.106.181.xxx: 2 occurrence(s)
🌐 1.168.132.xxx: 2 occurrence(s)
🌐 43.153.67.xxx: 1 occurrence(s)
🌐 35.240.50.xxx: 1 occurrence(s)
🌐 35.205.211.xxx: 1 occurrence(s)
🌐 35.195.138.xxx: 1 occurrence(s)
🌐 34.140.130.xxx: 1 occurrence(s)
🌐 167.99.210.xxx: 1 occurrence(s)
🌐 152.32.206.xxx: 1 occurrence(s)

List of Computers:
🖥️ windows: 3 occurrence(s)

[Sentinel/US-West] #opencanary analysis for yesterday

Summary:
🔄 Total Connection Attempts: 26822
👤 Unique Usernames: 613
🔑 Distinct Passwords: 408
🌐 Unique Attacker IPs: 673

Port Popularity (Port / Count):
🖥️ VNC: 11815
🗃️ MSSQL: 6330
🔐 SSH: 4024
🖥️ RDP: 3758
🗄️ SMB: 598
💻 Telnet: 194
🐬 MySQL: 57
🔴 REDIS: 42
📂 FTP: 4

Top 10 Usernames (Username / Count):
👤 hello: 1207
👤 35: 338
👤 root: 319
👤 admin: 107
👤 administr: 90
👤 user: 76
👤 Administr: 33
👤 pos: 21
👤 test: 14
👤 default: 14

Top 10 Passwords (Password / Count):
🔑 123456: 34
🔑 password: 23
🔑 admin: 18
🔑 1234: 15
🔑 123: 13
🔑 12345: 12
🔑 default: 10
🔑 guest: 9
🔑 root: 7
🔑 12345678: 7

Top 10 Attacker IPs (IP / Count):
🌐 162.241.241.xxx: 3643
🌐 141.98.11.xxx: 2892
🌐 45.227.254.xxx: 2470
🌐 39.172.63.xxx: 1783
🌐 127.0.0.xxx: 1436
🌐 42.248.6.xxx: 809
🌐 162.216.241.xxx: 573
🌐 149.88.12.xxx: 520
🌐 158.51.96.xxx: 420
🌐 137.184.168.xxx: 383

The OpenCanary Experience is at https://www.toce.ch

[Armada/US-East] #opencanary Samba Access Summary for Mar 19

This OpenCanary received 16 file sample(s) yesterday.

File hashes seen:
► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 15 file(s)
https://www.virustotal.com/gui/file/3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71
► e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 : 1 file(s)
https://www.virustotal.com/gui/file/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

List of Usernames:
👤 administrator: 10132 occurrence(s)
👤 admin: 5169 occurrence(s)
👤 hp: 4203 occurrence(s)
👤 user: 1004 occurrence(s)
👤 acer: 186 occurrence(s)
👤 pc-202112311003_hudakglei: 82 occurrence(s)
👤 bvdhyhn_domain: 38 occurrence(s)
👤 guest: 6 occurrence(s)
👤 comptes: 1 occurrence(s)
👤 message: occurrence(s)
👤 message: occurrence(s)
👤 message: occurrence(s)
👤 message: occurrence(s)
👤 message: occurrence(s)
👤 message: occurrence(s)

List of IP Addresses:
🌐 202.58.95.xxx: 13074 occurrence(s)
🌐 103.133.70.xxx: 4778 occurrence(s)
🌐 202.88.248.xxx: 865 occurrence(s)
🌐 103.47.218.xxx: 841 occurrence(s)
🌐 117.216.172.xxx: 524 occurrence(s)
🌐 115.242.147.xxx: 440 occurrence(s)
🌐 14.243.192.xxx: 259 occurrence(s)
🌐 103.47.219.xxx: 199 occurrence(s)
🌐 113.161.128.xxx: 176 occurrence(s)
🌐 196.188.104.xxx: 146 occurrence(s)
🌐 122.52.203.xxx: 132 occurrence(s)
🌐 113.186.237.xxx: 125 occurrence(s)
🌐 58.69.74.xxx: 124 occurrence(s)
🌐 182.60.30.xxx: 122 occurrence(s)
🌐 203.92.41.xxx: 88 occurrence(s)
🌐 202.60.110.xxx: 74 occurrence(s)
🌐 14.189.148.xxx: 70 occurrence(s)
🌐 202.83.29.xxx: 66 occurrence(s)
🌐 152.230.27.xxx: 55 occurrence(s)
🌐 42.116.63.xxx: 44 occurrence(s)
🌐 186.10.74.xxx: 44 occurrence(s)
🌐 122.3.86.xxx: 44 occurrence(s)
🌐 186.10.24.xxx: 41 occurrence(s)
🌐 113.176.126.xxx: 27 occurrence(s)
🌐 91.93.154.xxx: 22 occurrence(s)
🌐 89.33.222.xxx: 22 occurrence(s)
🌐 59.94.139.xxx: 22 occurrence(s)
🌐 59.88.4.xxx: 22 occurrence(s)
🌐 58.38.37.xxx: 22 occurrence(s)
🌐 42.114.32.xxx: 22 occurrence(s)
🌐 36.238.81.xxx: 22 occurrence(s)
🌐 36.142.51.xxx: 22 occurrence(s)
🌐 36.129.40.xxx: 22 occurrence(s)
🌐 220.143.220.xxx: 22 occurrence(s)
🌐 202.88.237.xxx: 22 occurrence(s)
🌐 201.146.178.xxx: 22 occurrence(s)
🌐 196.203.248.xxx: 22 occurrence(s)
🌐 190.180.46.xxx: 22 occurrence(s)
🌐 189.231.73.xxx: 22 occurrence(s)
🌐 188.0.175.xxx: 22 occurrence(s)
🌐 186.67.106.xxx: 22 occurrence(s)
🌐 186.116.8.xxx: 22 occurrence(s)
🌐 186.10.23.xxx: 22 occurrence(s)
🌐 182.76.178.xxx: 22 occurrence(s)
🌐 151.80.88.xxx: 22 occurrence(s)
🌐 139.5.157.xxx: 22 occurrence(s)
🌐 124.105.235.xxx: 22 occurrence(s)
🌐 120.61.93.xxx: 22 occurrence(s)
🌐 118.213.135.xxx: 22 occurrence(s)
🌐 117.255.73.xxx: 22 occurrence(s)
🌐 117.235.175.xxx: 22 occurrence(s)
🌐 117.232.102.xxx: 22 occurrence(s)
🌐 115.178.102.xxx: 22 occurrence(s)
🌐 112.199.65.xxx: 22 occurrence(s)
🌐 111.92.46.xxx: 22 occurrence(s)
🌐 103.89.233.xxx: 22 occurrence(s)
🌐 103.233.169.xxx: 22 occurrence(s)
🌐 103.206.130.xxx: 22 occurrence(s)
🌐 103.16.71.xxx: 22 occurrence(s)
🌐 103.109.176.xxx: 22 occurrence(s)
🌐 103.106.193.xxx: 22 occurrence(s)
🌐 211.72.82.xxx: 21 occurrence(s)
🌐 190.167.237.xxx: 19 occurrence(s)
🌐 124.105.111.xxx: 19 occurrence(s)
🌐 41.102.167.xxx: 12 occurrence(s)
🌐 59.178.205.xxx: 11 occurrence(s)
🌐 49.249.2.xxx: 11 occurrence(s)
🌐 38.137.55.xxx: 11 occurrence(s)
🌐 187.237.165.xxx: 11 occurrence(s)
🌐 186.67.157.xxx: 11 occurrence(s)
🌐 171.213.224.xxx: 11 occurrence(s)
🌐 14.194.49.xxx: 11 occurrence(s)
🌐 118.163.48.xxx: 11 occurrence(s)
🌐 111.92.62.xxx: 11 occurrence(s)
🌐 110.235.129.xxx: 11 occurrence(s)
🌐 189.189.31.xxx: 10 occurrence(s)
🌐 35.216.239.xxx: 3 occurrence(s)
🌐 185.226.197.xxx: 3 occurrence(s)
🌐 27.124.95.xxx: 2 occurrence(s)
🌐 223.207.116.xxx: 2 occurrence(s)
🌐 220.136.146.xxx: 2 occurrence(s)
🌐 188.157.8.xxx: 2 occurrence(s)
🌐 186.89.217.xxx: 2 occurrence(s)
🌐 176.98.231.xxx: 2 occurrence(s)
🌐 157.119.205.xxx: 2 occurrence(s)
🌐 14.164.8.xxx: 2 occurrence(s)
🌐 14.161.39.xxx: 2 occurrence(s)
🌐 136.232.196.xxx: 2 occurrence(s)
🌐 125.212.158.xxx: 2 occurrence(s)
🌐 122.187.178.xxx: 2 occurrence(s)
🌐 118.163.33.xxx: 2 occurrence(s)
🌐 113.212.87.xxx: 2 occurrence(s)
🌐 113.166.14.xxx: 2 occurrence(s)
🌐 113.128.47.xxx: 2 occurrence(s)
🌐 34.76.107.xxx: 1 occurrence(s)
🌐 34.140.130.xxx: 1 occurrence(s)
🌐 34.14.23.xxx: 1 occurrence(s)
🌐 118.113.146.xxx: 1 occurrence(s)
🌐 113.160.185.xxx: 1 occurrence(s)

List of Computers:
🖥️ null: 12374 occurrence(s)
🖥️ abuse_xmco_fr: 3 occurrence(s)
🖥️ windows: 1 occurrence(s)

[Armada/US-East] #opencanary Samba Access Summary for Mar 19

This OpenCanary received 0 file sample(s) yesterday.

File hashes seen:

List of Usernames:
👤 administrator: 937 occurrence(s)
👤 admin: 424 occurrence(s)
👤 guest: 6 occurrence(s)

List of IP Addresses:
🌐 113.179.195.xxx: 1342 occurrence(s)
🌐 91.103.105.xxx: 66 occurrence(s)
🌐 125.227.86.xxx: 66 occurrence(s)
🌐 14.224.159.xxx: 63 occurrence(s)
🌐 14.170.112.xxx: 59 occurrence(s)
🌐 58.69.118.xxx: 22 occurrence(s)
🌐 218.164.136.xxx: 22 occurrence(s)
🌐 117.243.179.xxx: 22 occurrence(s)
🌐 113.186.103.xxx: 22 occurrence(s)
🌐 41.47.108.xxx: 19 occurrence(s)
🌐 34.78.249.xxx: 5 occurrence(s)
🌐 35.216.239.xxx: 3 occurrence(s)
🌐 35.216.172.xxx: 3 occurrence(s)
🌐 81.17.90.xxx: 2 occurrence(s)
🌐 212.122.89.xxx: 2 occurrence(s)
🌐 202.148.59.xxx: 2 occurrence(s)
🌐 117.217.197.xxx: 2 occurrence(s)
🌐 113.174.77.xxx: 2 occurrence(s)
🌐 113.135.242.xxx: 2 occurrence(s)
🌐 110.138.71.xxx: 2 occurrence(s)
🌐 102.33.152.xxx: 2 occurrence(s)
🌐 35.187.98.xxx: 1 occurrence(s)
🌐 34.78.54.xxx: 1 occurrence(s)
🌐 34.53.178.xxx: 1 occurrence(s)
🌐 103.149.159.xxx: 1 occurrence(s)

List of Computers:
🖥️ null: 116 occurrence(s)
🖥️ windows: 7 occurrence(s)
🖥️ abuse_xmco_fr: 6 occurrence(s)

[Digger/CH] #opencanary Samba Access Summary for Mar 19

This OpenCanary received 0 file sample(s) yesterday.

File hashes seen:

List of Usernames:
👤 administrator: 18 occurrence(s)
👤 guest: 16 occurrence(s)
👤 maldev01: 3 occurrence(s)
👤 message: occurrence(s)

List of IP Addresses:
🌐 103.81.153.xxx: 22 occurrence(s)
🌐 45.244.98.xxx: 21 occurrence(s)
🌐 35.216.239.xxx: 5 occurrence(s)
🌐 35.216.172.xxx: 5 occurrence(s)
🌐 93.165.151.xxx: 3 occurrence(s)
🌐 84.137.252.xxx: 3 occurrence(s)
🌐 45.156.128.xxx: 3 occurrence(s)
🌐 98.20.8.xxx: 2 occurrence(s)
🌐 188.135.60.xxx: 2 occurrence(s)
🌐 188.13.240.xxx: 2 occurrence(s)
🌐 188.125.246.xxx: 2 occurrence(s)
🌐 179.62.88.xxx: 2 occurrence(s)
🌐 178.122.148.xxx: 2 occurrence(s)
🌐 131.0.120.xxx: 2 occurrence(s)
🌐 125.70.108.xxx: 2 occurrence(s)
🌐 103.195.65.xxx: 2 occurrence(s)
🌐 35.189.227.xxx: 1 occurrence(s)
🌐 34.78.50.xxx: 1 occurrence(s)
🌐 34.140.58.xxx: 1 occurrence(s)
🌐 146.148.113.xxx: 1 occurrence(s)

List of Computers:
🖥️ abuse_xmco_fr: 10 occurrence(s)
🖥️ pc100: 3 occurrence(s)
🖥️ desktop-c9ak2kc: 3 occurrence(s)
🖥️ windows: 2 occurrence(s)

[Sentinel/US-West] #opencanary analysis for yesterday

Summary:
🔄 Total Connection Attempts: 32271
👤 Unique Usernames: 159
🔑 Distinct Passwords: 403
🌐 Unique Attacker IPs: 683

Port Popularity (Port / Count):
🗃️ MSSQL: 12809
🖥️ VNC: 11720
🔐 SSH: 4095
🖥️ RDP: 2052
🗄️ SMB: 886
💻 Telnet: 422
📂 FTP: 134
🐬 MySQL: 84
🔴 REDIS: 69

Top 10 Usernames (Username / Count):
👤 hello: 844
👤 root: 475
👤 35: 357
👤 admin: 159
👤 test: 32
👤 user: 31
👤 Administrator: 30
👤 debian: 15
👤 Admin: 14
👤 backup: 14

Top 10 Passwords (Password / Count):
🔑 123456: 46
🔑 password: 41
🔑 admin: 35
🔑 12345: 33
🔑 12345678: 29
🔑 1234: 28
🔑 123456789: 19
🔑 1234567: 18
🔑 xc3511: 16
🔑 root: 16

Top 10 Attacker IPs (IP / Count):
🌐 162.241.241.xxx: 9812
🌐 141.98.11.xxx: 3287
🌐 39.172.63.xxx: 2344
🌐 127.0.0.xxx: 1437
🌐 45.227.254.xxx: 1201
🌐 183.24.62.xxx: 611
🌐 202.60.110.xxx: 594
🌐 207.174.1.xxx: 472
🌐 20.164.21.xxx: 383
🌐 107.150.119.xxx: 341

The OpenCanary Experience is at https://www.toce.ch

[Digger/CH] #opencanary analysis for yesterday

Summary:
🔄 Total Connection Attempts: 32185
👤 Unique Usernames: 912
🔑 Distinct Passwords: 1401
🌐 Unique Attacker IPs: 375

Port Popularity (Port / Count):
🖥️ RDP: 12264
🔐 SSH: 11961
💻 Telnet: 3830
🗃️ MSSQL: 3722
🖥️ VNC: 134
🔴 REDIS: 107
🐬 MySQL: 86
❓ 27017: 60
📡 Synology DSM: 11
🗄️ SMB: 7
📂 FTP: 3

Top 10 Usernames (Username / Count):
👤 test: 3865
👤 root: 3511
👤 hello: 2240
👤 admin: 889
👤 user: 277
👤 ubuntu: 237
👤 support: 147
👤 debian: 128
👤 guest: 76
👤 ubnt: 35

Top 10 Passwords (Password / Count):
🔑 admin: 419
🔑 123456: 409
🔑 xc3511: 285
🔑 password: 280
🔑 vizxv: 232
🔑 12345: 217
🔑 1234: 188
🔑 123: 154
🔑 support: 144
🔑 54321: 143

Top 10 Attacker IPs (IP / Count):
🌐 185.156.73.xxx: 7622
🌐 157.66.66.xxx: 3984
🌐 177.26.126.xxx: 3148
🌐 60.205.228.xxx: 2185
🌐 159.89.114.xxx: 1997
🌐 165.232.178.xxx: 1803
🌐 190.202.7.xxx: 1326
🌐 120.24.221.xxx: 1006
🌐 45.10.175.xxx: 850
🌐 123.138.18.xxx: 566

The OpenCanary Experience is at https://www.toce.ch

[Armada/US-East] #opencanary Samba Access Summary for Mar 18

This OpenCanary received 14 file sample(s) yesterday.

File hashes seen:
► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 13 file(s)
https://www.virustotal.com/gui/file/3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71
► e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 : 1 file(s)
https://www.virustotal.com/gui/file/e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855

List of Usernames:
👤 administrator: 11756 occurrence(s)
👤 admin: 6101 occurrence(s)
👤 hp: 4881 occurrence(s)
👤 user: 1415 occurrence(s)
👤 ece-ecadlab: 295 occurrence(s)
👤 limketkai: 82 occurrence(s)
👤 _null_: 80 occurrence(s)
👤 message: occurrence(s)

List of IP Addresses:
🌐 202.58.95.xxx: 13129 occurrence(s)
🌐 103.133.70.xxx: 6990 occurrence(s)
🌐 59.92.252.xxx: 889 occurrence(s)
🌐 103.199.208.xxx: 874 occurrence(s)
🌐 103.158.127.xxx: 853 occurrence(s)
🌐 103.47.218.xxx: 775 occurrence(s)
🌐 115.242.147.xxx: 698 occurrence(s)
🌐 202.60.110.xxx: 596 occurrence(s)
🌐 122.184.75.xxx: 518 occurrence(s)
🌐 58.69.149.xxx: 337 occurrence(s)
🌐 182.183.43.xxx: 297 occurrence(s)
🌐 123.24.201.xxx: 215 occurrence(s)
🌐 183.88.232.xxx: 143 occurrence(s)
🌐 101.83.227.xxx: 138 occurrence(s)
🌐 186.10.74.xxx: 110 occurrence(s)
🌐 117.218.103.xxx: 104 occurrence(s)
🌐 196.188.104.xxx: 85 occurrence(s)
🌐 138.219.56.xxx: 66 occurrence(s)
🌐 14.190.114.xxx: 56 occurrence(s)
🌐 152.230.27.xxx: 55 occurrence(s)
🌐 113.160.206.xxx: 52 occurrence(s)
🌐 202.88.244.xxx: 44 occurrence(s)
🌐 203.92.41.xxx: 33 occurrence(s)
🌐 182.182.76.xxx: 30 occurrence(s)
🌐 89.33.222.xxx: 22 occurrence(s)
🌐 62.148.235.xxx: 22 occurrence(s)
🌐 59.99.184.xxx: 22 occurrence(s)
🌐 49.249.148.xxx: 22 occurrence(s)
🌐 223.204.68.xxx: 22 occurrence(s)
🌐 202.88.232.xxx: 22 occurrence(s)
🌐 202.83.56.xxx: 22 occurrence(s)
🌐 202.164.156.xxx: 22 occurrence(s)
🌐 197.10.135.xxx: 22 occurrence(s)
🌐 187.237.165.xxx: 22 occurrence(s)
🌐 183.82.103.xxx: 22 occurrence(s)
🌐 183.255.96.xxx: 22 occurrence(s)
🌐 182.253.170.xxx: 22 occurrence(s)
🌐 176.236.169.xxx: 22 occurrence(s)
🌐 171.49.193.xxx: 22 occurrence(s)
🌐 171.248.151.xxx: 22 occurrence(s)
🌐 171.243.54.xxx: 22 occurrence(s)
🌐 171.227.28.xxx: 22 occurrence(s)
🌐 154.0.30.xxx: 22 occurrence(s)
🌐 120.61.200.xxx: 22 occurrence(s)
🌐 120.240.132.xxx: 22 occurrence(s)
🌐 118.170.197.xxx: 22 occurrence(s)
🌐 117.5.161.xxx: 22 occurrence(s)
🌐 117.243.55.xxx: 22 occurrence(s)
🌐 117.240.78.xxx: 22 occurrence(s)
🌐 115.243.236.xxx: 22 occurrence(s)
🌐 113.172.124.xxx: 22 occurrence(s)
🌐 110.49.3.xxx: 22 occurrence(s)
🌐 202.164.153.xxx: 20 occurrence(s)
🌐 196.202.71.xxx: 19 occurrence(s)
🌐 181.115.156.xxx: 16 occurrence(s)
🌐 82.209.216.xxx: 11 occurrence(s)
🌐 49.249.85.xxx: 11 occurrence(s)
🌐 219.146.92.xxx: 11 occurrence(s)
🌐 203.172.194.xxx: 11 occurrence(s)
🌐 202.88.237.xxx: 11 occurrence(s)
🌐 200.111.11.xxx: 11 occurrence(s)
🌐 186.10.23.xxx: 11 occurrence(s)
🌐 14.194.49.xxx: 11 occurrence(s)
🌐 124.235.98.xxx: 11 occurrence(s)
🌐 111.92.20.xxx: 11 occurrence(s)
🌐 103.41.100.xxx: 11 occurrence(s)
🌐 101.53.240.xxx: 11 occurrence(s)
🌐 61.1.116.xxx: 10 occurrence(s)
🌐 122.52.201.xxx: 10 occurrence(s)
🌐 41.40.148.xxx: 5 occurrence(s)
🌐 35.240.121.xxx: 5 occurrence(s)
🌐 125.20.197.xxx: 5 occurrence(s)
🌐 177.125.40.xxx: 3 occurrence(s)
🌐 143.198.68.xxx: 3 occurrence(s)
🌐 92.126.201.xxx: 2 occurrence(s)
🌐 85.108.56.xxx: 2 occurrence(s)
🌐 78.109.52.xxx: 2 occurrence(s)
🌐 45.217.68.xxx: 2 occurrence(s)
🌐 41.111.198.xxx: 2 occurrence(s)
🌐 200.84.245.xxx: 2 occurrence(s)
🌐 200.58.182.xxx: 2 occurrence(s)
🌐 179.127.228.xxx: 2 occurrence(s)
🌐 178.155.28.xxx: 2 occurrence(s)
🌐 176.211.19.xxx: 2 occurrence(s)
🌐 154.126.219.xxx: 2 occurrence(s)
🌐 14.242.210.xxx: 2 occurrence(s)
🌐 122.160.75.xxx: 2 occurrence(s)
🌐 117.203.100.xxx: 2 occurrence(s)
🌐 115.96.219.xxx: 2 occurrence(s)
🌐 113.177.121.xxx: 2 occurrence(s)
🌐 103.142.200.xxx: 2 occurrence(s)
🌐 102.33.155.xxx: 2 occurrence(s)
🌐 37.19.107.xxx: 1 occurrence(s)
🌐 35.187.98.xxx: 1 occurrence(s)
🌐 34.53.175.xxx: 1 occurrence(s)
🌐 34.140.186.xxx: 1 occurrence(s)
🌐 197.33.120.xxx: 1 occurrence(s)
🌐 188.120.99.xxx: 1 occurrence(s)
🌐 139.59.136.xxx: 1 occurrence(s)

List of Computers:
🖥️ null: 12608 occurrence(s)
🖥️ windows: 7 occurrence(s)
🖥️ workstation: 3 occurrence(s)
🖥️ shodan: 3 occurrence(s)