[Dshield] ssh attacks

Harry Hoffman hhoffman at ip-solutions.net
Wed Oct 13 18:37:29 GMT 2004


I believe that rolo is the user created for a rolodex app.

HTH,
Harry

John Groseclose wrote:
> Quoting jayjwa <jayjwa at atr2.ath.cx>:
> 
> 
>>The "rolo" and
>>"cyrus" ones I have no idea. You'd think they'd use something more
>>popular; how many people do you know named "rolo"?
> 
> 
> I would bet that they're role accounts for software. cyrus is a well-known IMAP
> server. I'm not familiar with rolo, but I'd bet it's something along the same
> lines.
> 
> --
> spam delenda est
> _______________________________________________
> DShield and the Internet Storm Center are sponsored by the SANS Institute.
> To learn more about current SANS training, see http://www.sans.org .
> 
> _______________________________________________
> send all posts to list at lists.dshield.org
> To change your subscription options (or unsubscribe), see: http://www.dshield.org/mailman/listinfo/list



More information about the list mailing list