RE: It was bound to happen - suspected hack

I saw your modification in my research. Thanks for confirming it. I'll add it to my hosts.allow file.

Thanks for the quick responses.

Jon

I'd modify the hosts.allow file a bit more...

i.e.

sshd: localhost 192.168.0.0/255.255.255.0 12.30.163.* ALL:ALL:DENY

This is a "catch-all" that is a best practice just incase the hosts.deny is misconfigured or not configured at all, although the ALL:ALL in your hosts.deny is correct. It will deny access to all services that tcpd monitors to everything as a last resort. Hence, if it's not explicitly defined to be allowed, it is by default denied.

Just an idea...