The data indicates that SSH, RDP, and VNC are the most frequently targeted ports in cyberattacks.

[Digger/CH] #opencanary analysis for 20260830-20260930 Summary: 🔄 Total Connection Attempts: 1,514,471 👤 Unique Usernames: 9,320 🔑 Distinct Passwords: 34,898 🗝️ Distinct VNC Passwords: 1,176 🌐 Unique Attacker IPs: 9,916 Port Popularity (Port / Count): 🔐 SSH: 582,319 🖥️ RDP: 376,050 🖥️ VNC: 320,648 🗃️ MSSQL: 195,928 💻 Telnet: 31,325 🔴 REDIS: 2,426 🔢 Port 33306: 2,101 🗄️ SMB: 1,924 📂 FTP: 1,469 📡 Synology DSM: 263 🐙 GIT: 11 📁 TFTP: 7 Top 10 👤 Usernames (Value / Count): 👤 Usernames 188: 110,504 👤 Usernames root: 82,177 👤 Usernames administr: 34,952 👤 Usernames admin: 21,545 👤 Usernames hello: 13,572 👤 Usernames ubuntu: 12,854 👤 Usernames wallet: 12,711 👤 Usernames user: 5,206 👤 Usernames test: 3,748 👤 Usernames crypto: 2,758 Top 10 🔑 Passwords (Value / Count): 🔑 Passwords 123456: 8,140 🔑 Passwords admin: 4,509 🔑 Passwords password: 3,568 🔑 Passwords 1234: 3,407 🔑 Passwords 123: 3,218 🔑 Passwords 12345: 2,431 🔑 Passwords 12345678: 2,256 🔑 Passwords root: 2,235 🔑 Passwords xc3511: 1,427 🔑 Passwords 1: 1,390 Top 10 🗝️ VNC Passwords (Value / Count): 🗝️ VNC Passwords <Password was not in the common list>: 316,019 🗝️ VNC Passwords 1234567890: 195 🗝️ VNC Passwords password123: 161 🗝️ VNC Passwords 00000000: 158 🗝️ VNC Passwords 123456: 91 🗝️ VNC Passwords 111111: 71 🗝️ VNC Passwords 1234: 46 🗝️ VNC Passwords admin: 45 🗝️ VNC Passwords 1: 44 🗝️ VNC Passwords Password1: 43 Top 10 Attacker IPs (IP / Count): 🌐 221.165.139.xxx: 87,888 🌐 91.238.181.xxx: 75,084 🌐 163.245.213.xxx: 43,242 🌐 185.93.89.xxx: 41,053 🌐 157.245.176.xxx: 37,218 🌐 193.142.146.xxx: 23,614 🌐 141.255.162.xxx: 18,765 🌐 192.81.70.xxx: 17,554 🌐 103.27.177.xxx: 13,533 🌐 45.152.210.xxx: 13,358 The OpenCanary Experience is at https://www.toce.ch

[Sentinel/US-West] #opencanary analysis for 20260830-20260930 Summary: 🔄 Total Connection Attempts: 1,836,193 👤 Unique Usernames: 10,140 🔑 Distinct Passwords: 18,340 🗝️ Distinct VNC Passwords: 581 🌐 Unique Attacker IPs: 13,539 Port Popularity (Port / Count): 🖥️ RDP: 599,760 🗃️ MSSQL: 476,470 🔐 SSH: 380,585 🖥️ VNC: 313,959 🗄️ SMB: 34,895 💻 Telnet: 25,641 🔴 REDIS: 2,047 📂 FTP: 1,881 🐬 MySQL: 928 🌐 HTTP: 20 🐙 GIT: 7 Top 10 👤 Usernames (Value / Count): 👤 Usernames anonymous: 138,982 👤 Usernames 35: 83,510 👤 Usernames root: 50,650 👤 Usernames hello: 41,377 👤 Usernames administr: 24,594 👤 Usernames admin: 16,586 👤 Usernames user: 4,939 👤 Usernames ubuntu: 4,652 👤 Usernames Administrator: 4,380 👤 Usernames test: 1,989 Top 10 🔑 Passwords (Value / Count): 🔑 Passwords 123456: 6,653 🔑 Passwords admin: 3,356 🔑 Passwords 1234: 2,929 🔑 Passwords 123: 2,663 🔑 Passwords password: 2,511 🔑 Passwords 12345: 1,785 🔑 Passwords root: 1,681 🔑 Passwords 12345678: 1,638 🔑 Passwords 1: 1,274 🔑 Passwords xc3511: 1,044 Top 10 🗝️ VNC Passwords (Value / Count): 🗝️ VNC Passwords <Password was not in the common list>: 309,072 🗝️ VNC Passwords 1234567890: 277 🗝️ VNC Passwords password123: 277 🗝️ VNC Passwords master: 151 🗝️ VNC Passwords iloveyou: 83 🗝️ VNC Passwords 123456: 66 🗝️ VNC Passwords 1q2w3e4r: 54 🗝️ VNC Passwords football: 53 🗝️ VNC Passwords 111111: 51 🗝️ VNC Passwords q1w2e3r4: 49 Top 10 Attacker IPs (IP / Count): 🌐 104.192.6.xxx: 204,915 🌐 220.73.136.xxx: 176,720 🌐 77.83.38.xxx: 53,602 🌐 91.238.181.xxx: 52,351 🌐 127.0.0.xxx: 45,856 🌐 213.136.71.xxx: 42,721 🌐 147.124.222.xxx: 37,743 🌐 67.222.133.xxx: 27,372 🌐 80.75.212.xxx: 17,301 🌐 50.146.197.xxx: 17,277 The OpenCanary Experience is at https://www.toce.ch

[Armada/US-East] #opencanary analysis for 20260830-20260930 Summary: 🔄 Total Connection Attempts: 1,294,879 👤 Unique Usernames: 10,544 🔑 Distinct Passwords: 24,596 🗝️ Distinct VNC Passwords: 498 🌐 Unique Attacker IPs: 9,631 Port Popularity (Port / Count): 🖥️ RDP: 616,073 🔐 SSH: 449,791 🖥️ VNC: 145,699 🗃️ MSSQL: 45,499 💻 Telnet: 19,622 📂 FTP: 6,601 🗄️ SMB: 6,393 🔴 REDIS: 5,187 🐙 GIT: 7 🌐 HTTP: 7 Top 10 👤 Usernames (Value / Count): 👤 Usernames anonymous: 159,114 👤 Usernames hello: 66,501 👤 Usernames root: 58,167 👤 Usernames 35: 36,404 👤 Usernames 34: 17,180 👤 Usernames admin: 15,478 👤 Usernames administr: 7,319 👤 Usernames ubuntu: 4,635 👤 Usernames user: 4,124 👤 Usernames test: 3,100 Top 10 🔑 Passwords (Value / Count): 🔑 Passwords 123456: 7,817 🔑 Passwords 123: 3,601 🔑 Passwords 1234: 3,461 🔑 Passwords admin: 3,067 🔑 Passwords password: 2,568 🔑 Passwords 12345: 1,969 🔑 Passwords 12345678: 1,966 🔑 Passwords root: 1,843 🔑 Passwords 1: 1,578 🔑 Passwords 123456789: 1,014 Top 10 🗝️ VNC Passwords (Value / Count): 🗝️ VNC Passwords <Password was not in the common list>: 142,836 🗝️ VNC Passwords 1234567890: 134 🗝️ VNC Passwords password123: 129 🗝️ VNC Passwords Password1: 59 🗝️ VNC Passwords 123456: 49 🗝️ VNC Passwords 111111: 46 🗝️ VNC Passwords admin123: 41 🗝️ VNC Passwords 1111: 39 🗝️ VNC Passwords 0000: 35 🗝️ VNC Passwords 1234: 34 Top 10 Attacker IPs (IP / Count): 🌐 5.189.128.xxx: 114,248 🌐 13.140.129.xxx: 47,421 🌐 127.0.0.xxx: 45,898 🌐 147.124.222.xxx: 38,340 🌐 213.136.71.xxx: 33,730 🌐 91.238.181.xxx: 20,796 🌐 103.168.190.xxx: 20,295 🌐 45.152.210.xxx: 20,077 🌐 5.182.208.xxx: 15,401 🌐 92.205.109.xxx: 14,719 The OpenCanary Experience is at https://www.toce.ch