A bit OT: Cut off address probes?

[Raymond Dijkxhoorn]

Hi!

> This works by delaying one second before issuing the unknown user
> response. I wasn't happy with that, as the spamware just kept banging
> away at it anyway, so I dug around in the source and upped the delay to
> 15 seconds <g>. The dictionary attacks have all but stopped now. I used
> to get thousands of "unknown user" lines in my log each day - now I have
> about 10-15. :)

I had a dictionary attack today that was somehow smarter. It seems they
were using a distributed system, there were 612 different hosts involved.

Aargl.

Bye,
Raymond.