[Dshield] ssh attacks

John Groseclose iain at caradoc.org
Wed Oct 13 17:54:52 GMT 2004

Quoting jayjwa <jayjwa at atr2.ath.cx>:

> The "rolo" and
> "cyrus" ones I have no idea. You'd think they'd use something more
> popular; how many people do you know named "rolo"?

I would bet that they're role accounts for software. cyrus is a well-known IMAP
server. I'm not familiar with rolo, but I'd bet it's something along the same

spam delenda est

More information about the list mailing list