Re: iptables & tcp wrappers

> Im getting also frequent attempts to log into ssh on some servers using
> those exact usernames from different ip's. Its it a worm or just some
> new h4x0r tool ? anyone ?

It is nothing more than a compiled "tool" for hackers. Requires zero skill 
to compile it and run it against a range of IP address.

You can find the source in the link below.

http://www.k-otik.com/exploits/08202004.brutessh2.c.php

The number of attempts has gotten so bad that I have disabled SSHd from 
listening on the external interfaces of our servers much like you suggested, 
Francisco.

Tom Walsh
eXpressHosting