On Thu, 14 Oct 2004 08:33:34 -0500, Allan R. Batteiger <arb@xxxxxxxx> wrote: > Yes my logs reflect about 100 attempts a day from various IP addresses. > So far I have been sending complaints to the admin of the domains the > attempts come from. I have received positive responses from a couple of > them since they were ISPs and do not condone this type of behavior. I > generally grep the secure log file and send that to the admin of the > domain. Of course all of the "standard" lock down precautions have been > taken on my server. For those of us not so savvy, can you tell me where those logs are located and what they are named so I can see if I am experiencing the same? Also, what are the "standard" lock down precautions to be taken?