LongTail Log Analysis @ Marist College / Historical Data
All SSH Ports, Educational Site, Protected By a BlackRidge Technology Eclipse Gateway

This page is updated hourly. Last updated on Mon Jun 26 11:35:01 EDT 2017

SSH Brute Force Attempts
DescriptionTodayNever seen
Before Today
This
Month
This
Year
Since Logging
Started
Login Attempts 0 N/A 0 4,854 149,707
SSHPsycho Login Attempts [3] 0 N/A 0 0 0
Friends of SSHPsycho Login Attempts [4] 0 N/A 0 836 842
Associates of SSHPsycho Login Attempts [5] 0 N/A 0 0 0
Unique Passwords 0 0 0 249 74,103
Unique Usernames 0 0 0 149 245
Unique IPs 0 0 0 706 990


SSH Brute Force Attempts

Count of Last 30 Days Of Attacks (Bars are clickable)
last-30-days-attack-count.png

Prior 30 DaysAll
last-30-days-top-20-root-passwords

historical-top-20-root-passwords

last-30-days-top-20-admin-passwords

historical-top-20-admin-passwords

last-30-days-top-20-non-root-accounts

historical-top-20-non-root-accounts

last-30-days-top-20-non-root-passwords

historical-top-20-non-root-passwords

blackridge_identified.png

More Charts
All Charts For ALL hosts
2017/05/25 2017/05/26 2017/05/27 2017/05/28 2017/05/29 2017/05/30 2017/05/31 2017/06/01 2017/06/02 2017/06/03 2017/06/04 2017/06/05 2017/06/06 2017/06/07 2017/06/08 2017/06/09 2017/06/10 2017/06/11 2017/06/12 2017/06/13 2017/06/14 2017/06/15 2017/06/16 2017/06/17 2017/06/18 2017/06/19 2017/06/20 2017/06/21 2017/06/22 2017/06/23

ssh Log Files

Raw data before the BlackRidge protection was turned on This shows that this server is exposed to the internet and was receiving ssh attacks.

Raw data after the BlackRidge protection was turned on This shows that this server is no longer receiving ssh attacks.

BlackRidge Gateway identified and authorized inbound traffic This shows that this server receives identified (OK) ssh traffic. (Basically shows that we did not "play games" by turning off ssh.)

Daily Trends

Top 20 "root" Passwords
Top 20 "admin" account Passwords
Top Non 20 "root"/"admin" account Passwords
Top 20 Accounts

Statistics

Attack Statistics For BlackRidge Protected Server
Attack Statistics For All Servers, Broken Down By Server

Attack, Password, IP Address, Account Name Statistics For BlackRidge Protected Server
Attack, Password, IP Address, Account Name Statistics Broken Down By Server



Today's Password Activity

Passwords FIRST seen today

"root" Passwords (Restriced Access)
Top 20 "root" Passwords

"admin" account Passwords (Restriced Access)
Top 20 "admin" account Passwords

Non "root"/"admin" account Passwords (Restriced Access)
Top 20 Non "root"/"admin" account Passwords

Today's Username Activity

Accounts FIRST seen today

Accounts Tried
Top 20 Accounts Tried

Non "root"/"admin" account pairs
Top 20 Non "root"/"admin" account pairs

Today's IP Address Activity

IP Addresses FIRST seen today

IP Addresses
Top 20 IP Addresses
Attacks By Country, By IP Address


Last 7 Days Password Activity

"root" Passwords (Restriced Access)
Top 20 "root" Passwords

"admin" account Passwords (Restriced Access)
Top 20 "admin" account Passwords

Non "root"/"admin" account Passwords (Restriced Access)
Top 20 Non "root"/"admin" account Passwords

Last 7 Days Username Activity

Accounts Tried
Top 20 Accounts Tried

Non "root"/"admin" account pairs (Restriced Access)
Top 20 Non "root"/"admin" account pairs

Last 7 Days IP Address Activity

IP Addresses
Top 20 IP Addresses
Attacks By Country, By IP Address


Prior 30 Days Password Activity

"root" Passwords (Restriced Access)
Top 20 "root" Passwords

"admin" account Passwords (Restriced Access)
Top 20 "admin" account Passwords

Non "root"/"admin" account Passwords (Restriced Access)
Top 20 Non "root"/"admin" account Passwords

Prior 30 Days Username Activity

Accounts Tried
Top 20 Accounts Tried

Non "root"/"admin" account pairs (Restriced Access)
Top 20 Non "root"/"admin" account pairs

Prior 30 Days IP Address Activity

IP Addresses
Top 20 IP Addresses
Attacks By Country, By IP Address


Historical(ALL) Password Activity

Historical "root" Passwords (Restriced Access)
Historical Top 20 "root" Passwords
Historical "admin" account Passwords (Restriced Access)
Historical Top 20 "admin" account Passwords

Historical Non "root"/"admin" account Passwords (Restriced Access)
Historical Top 20 Non "root"/"admin" account Passwords

Historical(ALL) Account Activity

Historical Accounts Tried
Historical Top 20 Accounts Tried

Historical Non "root"/"admin" account pairs (Restriced Access)
Historical Top 20 Non "root"/"admin" account pairs

Historical(ALL) IP Address Activity

Historical IP Addresses
Historical Top 20 IP Addresses
Historical Attacks By Country, By IP Address
Historical Attacks By Time of Day


Long Term Historical Reports This includes RAW input data more than 90 days old.

LongTail Copyright 2015 by Eric Wedaa, under GPLV2