Updated: February 2026
Top Attacked SSH Passwords
Most used passwords by attackers in brute force attempts. If you use any of these, change it immediately.
33.281 attempts in 24h
Top Passwords
1.
123456323 IPs1658
2.
password136 IPs1137
3.
345gs5662d34624 IPs1019
4.
3245gs5662d34625 IPs1016
5.
odoo165 IPs890
6.
123241 IPs707
7.
J5cmmu=Kyf0-br8CsW5 IPs679
8.
solana24 IPs595
9.
1234220 IPs592
10.
12345678105 IPs571
11.
sol24 IPs530
12.
12345204 IPs465
13.
ubuntu51 IPs405
14.
1q2w3e4r31 IPs400
15.
admin137 IPs342
16.
validator17 IPs285
17.
user87 IPs245
18.
node14 IPs226
19.
solv13 IPs226
20.
qwerty77 IPs221
21.
P@ssw0rd84 IPs210
22.
12345678957 IPs186
23.
root102 IPs171
24.
firedancer8 IPs166
25.
11111174 IPs163
Top Usernames
1.
root796 IPs7369
2.
sol25 IPs1794
3.
admin422 IPs1674
4.
ubuntu377 IPs1667
5.
solana24 IPs1492
6.
345gs5662d34624 IPs1019
7.
odoo165 IPs890
8.
user82 IPs881
9.
ftpuser41 IPs825
10.
solv14 IPs631
11.
postgres50 IPs402
12.
oracle36 IPs307
13.
test58 IPs303
14.
validator13 IPs196
15.
support78 IPs187
16.
mysql33 IPs162
17.
node15 IPs150
18.
ftp22 IPs144
19.
guest28 IPs128
20.
debian30 IPs127
21.
socks82 IPs124
22.
git33 IPs122
23.
exx65 IPs117
24.
minoxidil4you22 IPs103
25.
dev27 IPs99
Most Used Combinations
1.
1019345gs5662d34/345gs5662d342.
890odoo16/odoo163.
793root/password4.
679ftpuser/J5cmmu=Kyf0-br8CsW5.
438solana/solana6.
385sol/sol7.
365ubuntu/ubuntu8.
269root/(empty)9.
204sol/12310.
198solv/solv11.
192root/3245gs5662d3412.
176user/user13.
150solv/12345614.
149validator/validator15.
148node/node16.
138admin/admin17.
129sol/123418.
114solana/sol19.
113ubuntu/12345620.
106solv/12345678SECURITY WARNING
If you recognize any of your passwords in this list, change them immediately. Use long and unique passwords for each service, and consider using a password manager.