Thomas Sprinzing wrote:
> 
> On 18-Nov-08, at 4:32 PM, Lee Sharp wrote:
>>
>> I actually leave ssh on port 22.  I also run fail2ban, which is 
>> amazing!  Not the answer you were looking for, but perhaps an answer...
> 
> seems the bad guys do actually know how to get arund that one, too:
> 
> http://www.theregister.co.uk/2008/12/08/brute_force_ssh_attack/

Drop fail2ban to one, and compile a list.  Sort it and publish it to 
block lists.  Profit!  (Oh wait...  This isn't slashdot)  :)

			Lee