[nycbug-talk] new bruteforcing. . .

George Rosamond george at ceetonetechnology.com
Mon Oct 22 17:09:19 EDT 2007

Peter Wright wrote:
>> On Mon, 22 Oct 2007, George Rosamond wrote:
>>> I noticed this happening to some of our boxes last night while tailing
>>> some logs:
>>> http://isc.sans.org/diary.html?storyid=3529
>>> Anyone else notice this going on?
>> I saw more in my logs on the few boxes open to the world, but pf is nuking
>> them nicely after a few tries (and we don't allow non-key logins anyhow).
>> One mystery though with the old scanner bots that I never figured out was
>> what is the deal with "fluffy"??
>> Oct 12 07:57:18 miko sshd[99893]: Invalid user fluffy from
>> Oct 16 08:01:32 miko sshd[41118]: Invalid user fluffy from
>> I understand "root", "admin", "staff", etc.  But fluffy??
> /me rushes to change his admin login from fluffy to something less obvious ;)
> -pete

the cat got his keyboard?



More information about the talk mailing list