Looking through my log reports this morning I was shocked to see lots of failed logins for users such as root, ftp, nobody, apache, operator, amanda, mysql, etc. All originated from one host, ns1.webmediaworks.net, A visit to their website explained everything..
TechTeaM OwnZ u box dollarz@bol.com.br
Unfortunately, the whois db seems to be down so I can’t even contact the webmedia site owners..