The Top 50 Credentials as seen by #1, #2 and #3

With over 20 million connection attempts hitting the 3 OpenCanary instances during 2023, a cross-section of the most common passwords being used on SSH and Telnet are worth sharing. These are the toxic, default passwords which bots are obviously trying to connect to, compromise and bring those hosts into botnets.

If you are running anything facing the Internet with these ports open and these credentials available, your device will be taken over.