[nycbug-talk] new bruteforcing. . .

Peter Wright pete at nomadlogic.org
Mon Oct 22 16:52:03 EDT 2007

> On Mon, 22 Oct 2007, George Rosamond wrote:
>> I noticed this happening to some of our boxes last night while tailing
>> some logs:
>> http://isc.sans.org/diary.html?storyid=3529
>> Anyone else notice this going on?
> I saw more in my logs on the few boxes open to the world, but pf is nuking
> them nicely after a few tries (and we don't allow non-key logins anyhow).
> One mystery though with the old scanner bots that I never figured out was
> what is the deal with "fluffy"??
> Oct 12 07:57:18 miko sshd[99893]: Invalid user fluffy from
> Oct 16 08:01:32 miko sshd[41118]: Invalid user fluffy from
> I understand "root", "admin", "staff", etc.  But fluffy??

/me rushes to change his admin login from fluffy to something less obvious ;)


Peter Wright
pete at nomadlogic.org

More information about the talk mailing list