LongTail Log Analysis @ Marist College / Today's Data
All SSH Ports, Educational Site, Protected By a BlackRidge Technology Eclipse Gateway

This page is updated hourly. Last updated on Thu Aug 24 02:21:23 EDT 2017

SSH Brute Force Attempts
DescriptionTodayNever seen
Before Today
This
Month
This
Year
Since Logging
Started
Login Attempts 0 N/A 0 4,854 149,707
SSHPsycho Login Attempts [3] 0 N/A 0 0 0
Friends of SSHPsycho Login Attempts [4] 0 N/A 0 836 842
Associates of SSHPsycho Login Attempts [5] 0 N/A 0 0 0
Unique Passwords 0 0 0 249 74,103
Unique Usernames 0 0 0 149 245
Unique IPs 0 0 0 706 990


Count of Last 30 Days Of Attacks (Bars are clickable)
last-30-days-attack-count.png

TodayPrior 7 Days
current-top-20-root-passwords

last-7-days-top-20-root-passwords

current-top-20-admin-passwords

last-7-days-top-20-admin-passwords

current-top-20-non-root-accounts

last-7-days-top-20-non-root-accounts

current-top-20-non-root-passwords

last-7-days-top-20-non-root-passwords

blackridge_identified.png

More Charts
All Charts For ALL Hosts
2017/07/24 2017/07/25 2017/07/26 2017/07/27 2017/07/28 2017/07/29 2017/07/30 2017/07/31 2017/08/01 2017/08/02 2017/08/03 2017/08/04 2017/08/05 2017/08/06 2017/08/07 2017/08/08 2017/08/09 2017/08/10 2017/08/11 2017/08/12 2017/08/13 2017/08/14 2017/08/15 2017/08/16 2017/08/17 2017/08/18 2017/08/19 2017/08/20 2017/08/21 2017/08/22

ssh Log Files

Raw data before the BlackRidge protection was turned on This shows that this server is exposed to the internet and was receiving ssh attacks.

Raw data after the BlackRidge protection was turned on This shows that this server is no longer receiving ssh attacks.

BlackRidge Identified (authorized) traffic This shows that this server receives identified (OK) ssh traffic. (Basically shows that we did not "play games" by turning off ssh.)

Daily Trends

Top 20 Root Passwords
Top 20 Account "admin" Passwords
Top Non 20 Root/Account "admin" Passwords
Top 20 Accounts

Statistics

Attack Statistics For BlackRidge Protected Server
Attack Statistics For All Servers, Broken Down By Server

Attack, Password, IP Address, Account Name Statistics For BlackRidge Protected Server
Attack, Password, IP Address, Account Name Statistics Broken Down By Server

Today's Password Activity

Passwords FIRST seen today

"root" Passwords (Restricted Access)
Top 20 "root" Passwords

Account "admin" Passwords (Restricted Access)
Top 20 Account "admin" Passwords

Non "root"/"admin" Passwords (Restricted Access)
Top 20 Non "root"/"admin" Passwords

Today's Username Activity

Accounts FIRST seen today

Accounts Tried
Top 20 Accounts Tried

Non "root"/"admin" pairs (Restricted Access)
Top 20 Non "root"/"admin" pairs

Today's IP Address Activity

IP Addresses FIRST seen today

IP Addresses
Top 20 IP Addresses
Attacks By Country, By IP Address

LongTail Copyright 2015 by Eric Wedaa, under GPLV2