“钓鱼”行动概要
使用一台位于上海的、长期闲置的腾讯云轻量应用服务器作为诱饵，对所有IPv4地址开放22端口和36000端口，使用实验性的SSH蜜罐进行钓鱼。
钓鱼行动自2024年4月开始，至2025年2月服务器到期结束，时长约10个月。
简要数据统计
此处仅作简要的数据展示，不进行任何分析，本人不对其发表任何观点。
登入尝试次数
- 22端口：1,181,057
- 36000端口：1,541,047
用户名TOP10
| 端口 | 22 | 36000 |
|---|---|---|
| 1 | root, 70.70% | root, 25.67% |
| 2 | admin, 2.01% | ubuntu, 0.77% |
| 3 | user, 1.47% | user, 0.63% |
| 4 | ubuntu, 1.33% | dell, 0.58% |
| 5 | test, 0.99% | admin, 0.51% |
| 6 | oracle, 0.79% | test, 0.40% |
| 7 | debian, 0.56% | 123456, 0.32% |
| 8 | ftpuser, 0.56% | postgres, 0.23% |
| 9 | centos, 0.43% | amax, 0.23% |
| 10 | guest, 0.39% | deploy, 0.20% |
密码TOP10
| 端口 | 22 | 36000 |
|---|---|---|
| 1 | 123456, 2.84% | 123456, 14.98% |
| 2 | 123, 1.03% | 111111, 5.96% |
| 3 | 空密码, 0.74% | 123, 3.92% |
| 4 | 1234, 0.69% | 1, 1.76% |
| 5 | admin, 0.69% | 1234, 1.43% |
| 6 | root, 0.52% | root, 1.16% |
| 7 | 12345678, 0.49% | 12345, 0.94% |
| 8 | 1, 0.49% | 空密码, 0.61% |
| 9 | 12345, 0.46% | 000000 0.41% |
| 10 | test, 0.42% | 12345678, 0.32% |
客户端TOP10
| 端口 | 22 | 36000 |
|---|---|---|
| 1 | SSH-2.0-Go, 68.11% | SSH-2.0-Go, 46.40% |
| 2 | SSH-2.0-libssh_0.9.6, 12.97% | SSH-2.0-libssh_0.9.3, 26.72% |
| 3 | SSH-2.0-libssh2_1.11.0, 4.86% | SSH-2.0-OpenSSH, 26.12% |
| 4 | SSH-2.0-libssh2_1.4.3, 3.22% | SSH-2.0-libssh2_1.4.3, 0.76% |
| 5 | SSH-2.0-libssh2_1.9.0, 2.98% | SSH-2.0-paramiko_3.4.0, 0.00% |
| 6 | SSH-2.0-OpenSSH, 2.01% | SSH-2.0-libssh_0.10.6, 0.00% |
| 7 | SSH-2.0-libssh_0.9.5, 1.58% | SSH-2.0-AsyncSSH_2.18.0, 0.00% |
| 8 | SSH-2.0-OpenSSH_7.4, 0.49% | SSH-2.0-paramiko_3.5.0, 0.00% |
| 9 | SSH-2.0-libssh2_1.8.2, 0.43% | N/A |
| 10 | SSH-2.0-makiko, 0.28% | N/A |
地理位置TOP10
| 端口 | 22 | 36000 |
|---|---|---|
| 1 | 越南, 42.23% | 美国, 20.23% |
| 2 | 美国, 11.83% | 越南, 13.28% |
| 3 | 新加坡, 4.96% | 法国, 10.29% |
| 4 | 印度, 4.23% | 保加利亚, 9.24% |
| 5 | 法国, 4.06% | 德国, 8.90% |
| 6 | 韩国, 3.28% | 新加坡, 7.75% |
| 7 | 澳大利亚, 3.11% | 英国, 7.19% |
| 8 | 德国, 2.77% | 荷兰, 5.54% |
| 9 | 伊朗, 2.73% | 印度尼西亚, 3.72% |
| 10 | 中国香港, 2.66% | 韩国, 3.60% |
时间分布(均以北京时间计)
| 月份/端口 | 22 | 36000 |
|---|---|---|
| 2024-04 | 0.05% | N/A |
| 2024-05 | 8.24% | 0.93% |
| 2024-06 | 14.52% | 0.22% |
| 2024-07 | 25.25% | 18.84% |
| 2024-08 | 27.53% | 11.64% |
| 2024-09 | 10.01% | 7.86% |
| 2024-10 | 2.66% | 12.83% |
| 2024-11 | 3.27% | 11.11% |
| 2024-12 | 4.98% | 8.74% |
| 2025-01 | 1.92% | 19.17% |
| 2025-02 | 1.59% | 8.66% |
| 星期/端口 | 22 | 36000 |
|---|---|---|
| Mon | 23.49% | 14.36% |
| Tue | 13.47% | 13.26% |
| Wed | 12.47% | 12.05% |
| Thu | 10.67% | 15.11% |
| Fri | 13.87% | 15.12% |
| Sat | 14.01% | 12.85% |
| Sun | 12.02% | 17.25% |
| 小时/端口 | 22 | 36000 |
|---|---|---|
| 00 | 3.55% | 4.10% |
| 01 | 4.36% | 4.25% |
| 02 | 4.57% | 4.46% |
| 03 | 5.31% | 4.18% |
| 04 | 6.96% | 3.95% |
| 05 | 6.36% | 4.55% |
| 06 | 4.94% | 3.85% |
| 07 | 3.57% | 4.10% |
| 08 | 5.81% | 4.10% |
| 09 | 3.49% | 3.93% |
| 10 | 3.42% | 3.96% |
| 11 | 4.04% | 3.75% |
| 12 | 3.67% | 6.95% |
| 13 | 3.35% | 4.29% |
| 14 | 3.98% | 3.62% |
| 15 | 4.01% | 3.67% |
| 16 | 4.10% | 3.68% |
| 17 | 3.40% | 4.05% |
| 18 | 2.77% | 3.91% |
| 19 | 3.13% | 4.14% |
| 20 | 2.96% | 3.95% |
| 21 | 2.33% | 4.34% |
| 22 | 4.03% | 4.17% |
| 23 | 5.89% | 4.01% |
原始数据发布
发布时间待定，看我什么时间有空整理导出吧，如果感兴趣可先邮件联系我。