[Ossec-list] [Dshield] Interesting information about SSH scans

[BKWalker at drbsystems.com (Brenden Walker)]

> -----Original Message-----
> [mailto:list-bounces at lists.dshield.org] On Behalf Of Daniel Cid
> 
<snip>

> ** Scan 2 - Attempt a lot of strange passwords against the 
> root and admin account. Look bellow to see why I think they 
> are strange. Looks like the scanner is broken :) Received 
> scans of this type from 3 different IPS.

Those password attempts aren't all that odd.  Look at the letters,
numbers on a keyboard and the order they are in.  It'll make sense to
scan these.