Updated: April 2026
Top Attacked SSH Passwords
Most used passwords by attackers in brute force attempts. If you use any of these, change it immediately.
19,380 attempts in 24h
Top Passwords
1.
admin64 IPs1,162
2.
123456132 IPs822
3.
solana27 IPs646
4.
sol27 IPs600
5.
12394 IPs455
6.
1234567845 IPs428
7.
ubuntu38 IPs417
8.
3245gs5662d34179 IPs366
9.
345gs5662d34178 IPs366
10.
validator20 IPs323
11.
123467 IPs299
12.
solv17 IPs298
13.
node13 IPs253
14.
firedancer8 IPs204
15.
solana12310 IPs175
16.
password71 IPs156
17.
raydium6 IPs128
18.
sol1236 IPs125
19.
qwer123412 IPs125
20.
odoo165 IPs124
21.
root44 IPs114
22.
jito7 IPs111
23.
Connection: keep-alive1 IPs91
24.
Accept-Encoding: gzip, deflate1 IPs91
25.
123456789018 IPs88
Top Usernames
1.
root357 IPs4,246
2.
sol28 IPs1,887
3.
solana27 IPs1,770
4.
ubuntu210 IPs1,514
5.
admin161 IPs875
6.
solv19 IPs785
7.
user119 IPs550
8.
345gs5662d34178 IPs366
9.
postgres95 IPs262
10.
validator15 IPs211
11.
test121 IPs205
12.
node13 IPs171
13.
steam111 IPs162
14.
ftpuser90 IPs129
15.
odoo165 IPs124
16.
lighthouse4 IPs122
17.
bot59 IPs103
18.
firedancer7 IPs95
19.
deploy50 IPs94
20.
User-Agent: python-requests/2.27.11 IPs91
21.
Accept: */*1 IPs91
22.
mapr4 IPs84
23.
raydium6 IPs82
24.
odoo50 IPs76
25.
git56 IPs73
Most Used Combinations
1.
912root/admin2.
471solana/solana3.
408sol/sol4.
366345gs5662d34/345gs5662d345.
364ubuntu/ubuntu6.
270solv/solv7.
213admin/admin8.
210sol/1239.
198solv/12345610.
171node/node11.
163validator/validator12.
148root/3245gs5662d3413.
147solana/sol14.
138root/(empty)15.
125sol/solana16.
125sol/123417.
124odoo16/odoo1618.
121solv/1234567819.
120solana/solana12320.
118solana/12345678SECURITY WARNING
If you recognize any of your passwords in this list, change them immediately. Use long and unique passwords for each service, and consider using a password manager.