> On Mon, 2005-08-15 at 11:11, Rick Lim wrote: > > Hi there, > > > > I know this is not the correct forum to ask this question, but I have to > > start somewhere....... > > > > I have a friend with a linux firewall box. > > There appears to be a very simple minded hacker trying to do simple ssh > > password attacks on this box. > > > > I have been using whois and reporting this to each ISP he/she is coming > from > > but he/she just breaks into a different machine on an new ISP and tries > > again. > > > > Is there something more I can do to track this person down? > > Thanks. > > [Tim Holmes] How did you detect this / track this, I have ssh open to the net for remote access, and I would like to learn how to detect / defend this kind of thing TIM
