[nsp-sec] Strange usernames in SSH scan ?

Kurt Jaeger pi at nepustil.net
Mon Sep 19 13:45:11 EDT 2011


Hi!

Recently, we found strange usernames in SSH scans.

sshd[23410]: Invalid user @n!md at mP#$@&#3141$&#@!#mTadm!n$@ from 60.191.41.97
sshd[23420]: Invalid user HOla%201%2B2%3D3%20Espa%00a%20%00 from 60.191.41.97

Is there a reason for those usernames (syslog exploits ?) ?

-- 
MfG/Best regards, Kurt Jaeger                                   9 years to go !
Dr.-Ing. Nepustil & Co. GmbH  fon +49 7123 93006-0  pi at nepustil.net  
Rathausstr. 3                 fax +49 7123 93006-99
72658 Bempflingen             mob +49 171 3101372



More information about the nsp-security mailing list