[Dshield] ssh attacks

John Groseclose iain at caradoc.org
Wed Oct 13 17:54:52 GMT 2004


Quoting jayjwa <jayjwa at atr2.ath.cx>:

> The "rolo" and
> "cyrus" ones I have no idea. You'd think they'd use something more
> popular; how many people do you know named "rolo"?

I would bet that they're role accounts for software. cyrus is a well-known IMAP
server. I'm not familiar with rolo, but I'd bet it's something along the same
lines.

--
spam delenda est



More information about the list mailing list