TROYANOSYVIRUS
Updated: April 2026

Top Attacked SSH Passwords

Most used passwords by attackers in brute force attempts. If you use any of these, change it immediately.

19,380 attempts in 24h

Top Passwords

1.admin
64 IPs1,162
2.123456
132 IPs822
3.solana
27 IPs646
4.sol
27 IPs600
5.123
94 IPs455
6.12345678
45 IPs428
7.ubuntu
38 IPs417
8.3245gs5662d34
179 IPs366
9.345gs5662d34
178 IPs366
10.validator
20 IPs323
11.1234
67 IPs299
12.solv
17 IPs298
13.node
13 IPs253
14.firedancer
8 IPs204
15.solana123
10 IPs175
16.password
71 IPs156
17.raydium
6 IPs128
18.sol123
6 IPs125
19.qwer1234
12 IPs125
20.odoo16
5 IPs124
21.root
44 IPs114
22.jito
7 IPs111
23.Connection: keep-alive
1 IPs91
24.Accept-Encoding: gzip, deflate
1 IPs91
25.1234567890
18 IPs88

Top Usernames

1.root
357 IPs4,246
2.sol
28 IPs1,887
3.solana
27 IPs1,770
4.ubuntu
210 IPs1,514
5.admin
161 IPs875
6.solv
19 IPs785
7.user
119 IPs550
8.345gs5662d34
178 IPs366
9.postgres
95 IPs262
10.validator
15 IPs211
11.test
121 IPs205
12.node
13 IPs171
13.steam
111 IPs162
14.ftpuser
90 IPs129
15.odoo16
5 IPs124
16.lighthouse
4 IPs122
17.bot
59 IPs103
18.firedancer
7 IPs95
19.deploy
50 IPs94
20.User-Agent: python-requests/2.27.1
1 IPs91
21.Accept: */*
1 IPs91
22.mapr
4 IPs84
23.raydium
6 IPs82
24.odoo
50 IPs76
25.git
56 IPs73

Most Used Combinations

1.root/admin
912
2.solana/solana
471
3.sol/sol
408
4.345gs5662d34/345gs5662d34
366
5.ubuntu/ubuntu
364
6.solv/solv
270
7.admin/admin
213
8.sol/123
210
9.solv/123456
198
10.node/node
171
11.validator/validator
163
12.root/3245gs5662d34
148
13.solana/sol
147
14.root/(empty)
138
15.sol/solana
125
16.sol/1234
125
17.odoo16/odoo16
124
18.solv/12345678
121
19.solana/solana123
120
20.solana/12345678
118

SECURITY WARNING

If you recognize any of your passwords in this list, change them immediately. Use long and unique passwords for each service, and consider using a password manager.