More SSH 'trolling'

[Björn Persson]

Brian Fahrlander wrote:

>     And this site hit me 40-50 times trying various usernames, including
> 'root' quite a lot. Other names such as patrick, nobody, wwwrun, www,
> cyrus, horde, iceuser, rolo...it doesn't look like anything that, say,
> Cisco would use on their factory defaults.  They also don't look like a
> set of names _I_ would use, so they probably don't know _me_.  Times
> range from 0633-0654...

A list like the one below, right? I've seen a couple of these at home. 
It sure is a breakin attempt, but I allow only public key authentication 
so I'm not particularly worried.

Illegal user patrick from 220.95.231.137
Illegal user patrick from 220.95.231.137
Illegal user rolo from 220.95.231.137
Illegal user iceuser from 220.95.231.137
Illegal user horde from 220.95.231.137
Illegal user cyrus from 220.95.231.137
Illegal user www from 220.95.231.137
Illegal user wwwrun from 220.95.231.137
Illegal user matt from 220.95.231.137
Illegal user test from 220.95.231.137
Illegal user test from 220.95.231.137
Illegal user test from 220.95.231.137
Illegal user test from 220.95.231.137
Illegal user www-data from 220.95.231.137
Illegal user mysql from 220.95.231.137
Illegal user irc from 220.95.231.137
Illegal user irc from 220.95.231.137
Illegal user jane from 220.95.231.137
Illegal user pamela from 220.95.231.137
Illegal user cosmin from 220.95.231.137
Illegal user cip52 from 220.95.231.137
Illegal user cip51 from 220.95.231.137
Illegal user noc from 220.95.231.137
Illegal user webmaster from 220.95.231.137
Illegal user data from 220.95.231.137
Illegal user user from 220.95.231.137
Illegal user user from 220.95.231.137
Illegal user user from 220.95.231.137
Illegal user web from 220.95.231.137
Illegal user web from 220.95.231.137
Illegal user oracle from 220.95.231.137
Illegal user sybase from 220.95.231.137
Illegal user master from 220.95.231.137
Illegal user account from 220.95.231.137
Illegal user backup from 220.95.231.137
Illegal user server from 220.95.231.137
Illegal user adam from 220.95.231.137
Illegal user alan from 220.95.231.137
Illegal user frank from 220.95.231.137
Illegal user george from 220.95.231.137
Illegal user henry from 220.95.231.137
Illegal user john from 220.95.231.137
Illegal user test from 220.95.231.137

Björn Persson