New SSH Username Report, (Sun, Apr 6th)

Honeypot telemetry from Cowrie highlights newly observed SSH/Telnet brute-force usernames over the past 30 days, including typos, first-initial/last-name patterns, admin-themed accounts (e.g., dbmasteruser), and mistakes like supplying a wordlist file path as a username—underscoring that attackers err and no username is inherently safe; a JSON feed of recent usernames is available for further analysis.