Hopefully there's someone from TW Telecom on the list. Seeing a sustained and fairly heavy ssh bruteforce from 97.65.205.9, been going for 12 hours now. If you need any more details please let me know. Thanks James