Between 2026-08-25 and 2026-08-28, OpenCanary distributed honeypot systems across multiple locations (Digger/CH, Armada/US-East, Sentinel/US-West) logged sustained brute-force attack attempts. A 2026-08-28 summary from Digger/CH reported 36,870 connection attempts in one day from 592 unique attacker IPs using 704 distinct usernames and 2,601 passwords.
No BS check run yet — press ⚖ to extract this story's claims and verify them against independent sources.
[Digger/CH] # opencanary Samba Access Summary for Aug 24 This OpenCanary received 5 file sample(s) yesterday. File hashes seen: ► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 5 file(s) https://www. virustotal.com/gui/file/3c2fe3 08c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 List of Usernames: 👤 administrator: 483 occurrence(s) 👤 admin: 287 occurrence(s) 👤 hp:
[Armada/US-East] # opencanary Samba Access Summary for Aug 24 This OpenCanary received 0 file sample(s) yesterday. File hashes seen: List of Usernames: 👤 administrator: 2615 occurrence(s) 👤 hp: 1458 occurrence(s) 👤 admin: 1441 occurrence(s) 👤 dell: 1115 occurrence(s) 👤 guest: 1 occurrence(s) 👤 message: occurrence(s) List of IP Addresses: 🌐 167.179.37.xxx: 6732 occurrence(s) 🌐 186.10.23.xxx
this outlet adds: digger, 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71, https, virustotal, 3c2fe3, 08c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71, abuse, xmco
this outlet adds: 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71, https, virustotal, 3c2fe3, 08c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71, 1319, 47553059, 2631
[Armada/US-East] # opencanary Samba Access Summary for Aug 24 This OpenCanary received 27 file sample(s) yesterday. File hashes seen: ► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 25 file(s) https://www. virustotal.com/gui/file/3c2fe3 08c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 ► e3b0c44298fc1c149afbf4c8996fb92427ae41e4649b934ca495991b7852b855 : 2 file(s) http
[Digger/CH] # opencanary analysis for yesterday Summary: 🔄 Total Connection Attempts: 13690 👤 Unique Usernames: 769 🔑 Distinct Passwords: 1771 🌐 Unique Attacker IPs: 382 Port Popularity (Port / Count): 🔐 SSH: 10024 🖥️ RDP: 2281 💻 Telnet: 1056 📂 FTP: 81 🗄️ SMB: 63 🖥️ VNC: 62 📡 Synology DSM: 39 🐬 MySQL: 38 🔴 REDIS: 31 🗃️ MSSQL: 15 Top 10 Usernames (Username / Count): 👤 root: 1655 👤 a
[Sentinel/US-West] # opencanary analysis for yesterday Summary: 🔄 Total Connection Attempts: 49511 👤 Unique Usernames: 640 🔑 Distinct Passwords: 1869 🌐 Unique Attacker IPs: 449 Port Popularity (Port / Count): 🗃️ MSSQL: 15213 🔐 SSH: 12017 🖥️ RDP: 10097 🖥️ VNC: 6659 🗄️ SMB: 4660 💻 Telnet: 640 🔴 REDIS: 102 📂 FTP: 68 🐬 MySQL: 54 🌐 HTTP: 1 Top 10 Usernames (Username / Count): 👤 hello: 24
[Armada/US-East] # opencanary Samba Access Summary for Aug 25 This OpenCanary received 0 file sample(s) yesterday. File hashes seen: List of Usernames: 👤 administrator: 2094 occurrence(s) 👤 dell: 1096 occurrence(s) 👤 hp: 1088 occurrence(s) 👤 admin: 1079 occurrence(s) 👤 guest: 5 occurrence(s) 👤 message: occurrence(s) List of IP Addresses: 🌐 167.179.37.xxx: 5428 occurrence(s) 🌐 186.10.74.xxx
[Armada/US-East] # opencanary Samba Access Summary for Aug 25 This OpenCanary received 17 file sample(s) yesterday. File hashes seen: ► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 17 file(s) https://www. virustotal.com/gui/file/3c2fe3 08c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 List of Usernames: 👤 administrator: 6368 occurrence(s) 👤 admin: 4145 occurrence(s
[Digger/CH] # opencanary analysis for yesterday Summary: 🔄 Total Connection Attempts: 28602 👤 Unique Usernames: 661 🔑 Distinct Passwords: 2498 🌐 Unique Attacker IPs: 468 Port Popularity (Port / Count): 🔐 SSH: 12015 🖥️ RDP: 10997 🔴 REDIS: 1757 💻 Telnet: 1340 🖥️ VNC: 1276 🐬 MySQL: 1059 📂 FTP: 58 🗄️ SMB: 47 📡 Synology DSM: 40 🗃️ MSSQL: 13 Top 10 Usernames (Username / Count): 👤 root: 28
[Sentinel/US-West] # opencanary analysis for yesterday Summary: 🔄 Total Connection Attempts: 82863 👤 Unique Usernames: 686 🔑 Distinct Passwords: 1443 🌐 Unique Attacker IPs: 484 Port Popularity (Port / Count): 🗃️ MSSQL: 51665 🖥️ RDP: 14304 🔐 SSH: 8433 🖥️ VNC: 6340 🗄️ SMB: 995 💻 Telnet: 984 🔴 REDIS: 63 📂 FTP: 57 🐬 MySQL: 17 🌐 HTTP: 5 Top 10 Usernames (Username / Count): 👤 anonymous: 4
[Digger/CH] # opencanary analysis for 20260819-20260825 Summary: 🔄 Total Connection Attempts: 184,425 👤 Unique Usernames: 2,017 🔑 Distinct Passwords: 7,378 🗝️ Distinct VNC Passwords: 434 🌐 Unique Attacker IPs: 2,477 Port Popularity (Port / Count): 🔐 SSH: 69,988 🖥️ VNC: 45,618 🖥️ RDP: 36,289 💻 Telnet: 25,858 🔴 REDIS: 2,213 📂 FTP: 1,723 🔢 Port 33306: 1,255 🗃️ MSSQL: 1,135 📡 Synology DS
this outlet adds: sentinel, west, mysql, http
[Armada/US-East] # opencanary analysis for 20260819-20260825 Summary: 🔄 Total Connection Attempts: 259,137 👤 Unique Usernames: 2,131 🔑 Distinct Passwords: 7,765 🗝️ Distinct VNC Passwords: 252 🌐 Unique Attacker IPs: 2,441 Port Popularity (Port / Count): 🖥️ RDP: 112,286 🔐 SSH: 76,959 🖥️ VNC: 30,384 🗃️ MSSQL: 19,935 💻 Telnet: 14,399 📂 FTP: 4,049 🔴 REDIS: 984 🗄️ SMB: 111 🌐 HTTP: 29 🐙 GI
[Digger/CH] # opencanary Samba Access Summary for Aug 26 This OpenCanary received 0 file sample(s) yesterday. File hashes seen: List of Usernames: 👤 administrator: 17 occurrence(s) 👤 guest: 3 occurrence(s) List of IP Addresses: 🌐 61.222.206.xxx: 11 occurrence(s) 🌐 59.124.222.xxx: 11 occurrence(s) 🌐 45.156.129.xxx: 3 occurrence(s) 🌐 90.188.26.xxx: 2 occurrence(s) 🌐 2.121.247.xxx: 2 occurrenc
[Armada/US-East] # opencanary Samba Access Summary for Aug 26 This OpenCanary received 20 file sample(s) yesterday. File hashes seen: ► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 20 file(s) https://www. virustotal.com/gui/file/3c2fe3 08c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 List of Usernames: 👤 administrator: 5751 occurrence(s) 👤 admin: 3634 occurrence(s
[Digger/CH] # opencanary analysis for yesterday Summary: 🔄 Total Connection Attempts: 20591 👤 Unique Usernames: 627 🔑 Distinct Passwords: 1603 🌐 Unique Attacker IPs: 593 Port Popularity (Port / Count): 🖥️ RDP: 7976 🔐 SSH: 7802 🖥️ VNC: 2938 💻 Telnet: 1444 🔴 REDIS: 128 📡 Synology DSM: 115 📂 FTP: 113 🐬 MySQL: 53 🗃️ MSSQL: 13 🗄️ SMB: 9 Top 10 Usernames (Username / Count): 👤 188: 2047 👤
[Sentinel/US-West] # opencanary analysis for yesterday Summary: 🔄 Total Connection Attempts: 84842 👤 Unique Usernames: 610 🔑 Distinct Passwords: 1619 🌐 Unique Attacker IPs: 597 Port Popularity (Port / Count): 🖥️ RDP: 51477 🗃️ MSSQL: 14196 🔐 SSH: 12192 🖥️ VNC: 5879 💻 Telnet: 596 🗄️ SMB: 337 📂 FTP: 85 🔴 REDIS: 68 🐬 MySQL: 9 🌐 HTTP: 2 🐙 GIT: 1 Top 10 Usernames (Username / Count): 👤 an
[Digger/CH] # opencanary Samba Access Summary for Aug 27 This OpenCanary received 5 file sample(s) yesterday. File hashes seen: ► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 5 file(s) https://www. virustotal.com/gui/file/3c2fe3 08c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 List of Usernames: 👤 administrator: 406 occurrence(s) 👤 admin: 174 occurrence(s) 👤 seed
[Armada/US-East] # opencanary Samba Access Summary for Aug 27 This OpenCanary received 0 file sample(s) yesterday. File hashes seen: List of Usernames: 👤 administrator: 9 occurrence(s) 👤 guest: 3 occurrence(s) 👤 message: occurrence(s) List of IP Addresses: 🌐 197.255.224.xxx: 44 occurrence(s) 🌐 186.10.23.xxx: 44 occurrence(s) 🌐 200.33.143.xxx: 31 occurrence(s) 🌐 45.238.143.xxx: 21 occurrence
[Armada/US-East] # opencanary Samba Access Summary for Aug 27 This OpenCanary received 33 file sample(s) yesterday. File hashes seen: ► 3c2fe308c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 : 33 file(s) https://www. virustotal.com/gui/file/3c2fe3 08c0a563e06263bbacf793bbe9b2259d795fcc36b953793a7e499e7f71 List of Usernames: 👤 administrator: 7524 occurrence(s) 👤 admin: 4783 occurrence(s
[Digger/CH] # opencanary analysis for yesterday Summary: 🔄 Total Connection Attempts: 36870 👤 Unique Usernames: 704 🔑 Distinct Passwords: 2601 🌐 Unique Attacker IPs: 592 Port Popularity (Port / Count): 🖥️ RDP: 14619 🔐 SSH: 12783 💻 Telnet: 4404 🖥️ VNC: 1596 🗃️ MSSQL: 1135 🐬 MySQL: 1026 🗄️ SMB: 622 🔴 REDIS: 587 📂 FTP: 69 📡 Synology DSM: 29 Top 10 Usernames (Username / Count): 👤 root:
[Sentinel/US-West] # opencanary analysis for yesterday Summary: 🔄 Total Connection Attempts: 26105 👤 Unique Usernames: 692 🔑 Distinct Passwords: 1483 🌐 Unique Attacker IPs: 588 Port Popularity (Port / Count): 🔐 SSH: 9829 🖥️ VNC: 7940 🖥️ RDP: 5128 🗄️ SMB: 1473 🗃️ MSSQL: 983 💻 Telnet: 545 🔴 REDIS: 126 📂 FTP: 63 🐬 MySQL: 16 🌐 HTTP: 2 Top 10 Usernames (Username / Count): 👤 35: 2122 👤 r