We saw eight sequences (complete list of articles in References),
| From - To | Attempts | User IDs | Hosts | Successful Logins |
|---|---|---|---|---|
| 2008-11-19 15:04:22 - 2008-12-30 11:09:03 | 29916 | 6100 | 1193 | 0 |
| 2009-04-07 03:56:25 - 2009-04-12 21:01:37 | 12641 | 249 | 1104 | 0 |
| 2009-09-30 21:15:36 - 2009-10-15 13:42:07 | 9998 | 1 | 1071 | 0 |
| 2009-10-28 23:58:35 - 2010-01-22 09:56:24 | 44513 | 8110 | 4158 | 0 |
| 2010-06-17 01:55:34 - 2010-08-11 13:23:01 | 23014 | 3887 | 5568 | 0 |
| 2011-10-23 04:13:00 - 2011-10-29 05:40:07 | 4773 | 944 | 338 | 0 |
| 2011-11-03 20:56:18 - 2011-11-26 17:42:19 | 4907 | 2474 | 252 | 0 |
| 2012-04-01 12:33:04 - 2012-04-06 14:52:11 | 4757 | 1081 | 23 | 0 |
The 2009-09-30 sequence was notable for trying only root, the 2012-04-01 sequence for being the first to attempt access to OpenBSD hosts.
We may have missed earlier sequences, early reports place the first similar attempts as far back as 2007.