well, the offending address is: access-212.14.rev.fr.colt.net [213.41.14.212] http://www.networksolutions.com/en_US/whois/arin-details.jhtml;jsessionid=NB2J0M0PZ0BL2CWKEAPSFFA?whoistoken=7&parenttoken=8
can't you use iptables or ipchains to block colt.net's whole range. something like: iptables -A INPUT -i eth0 -s 213.41.14.212/8 -j DROP mrb > my messages log has hundreds of theres > Dec 15 09:38:46 McBain sshd(pam_unix)[4483]: authentication failure; > logname= uid=0 euid=0 tty=ssh ruser= > rhost=access-212.14.rev.fr.colt.net > Dec 15 09:38:50 McBain unix_chkpwd[4488]: check pass; user unknown > > > How do i stop them > > -- > _\ | /_ > (@ @) > -----oOOo-(_)-oOOo----- > ~Mark > ~Gardner > > -------------------- > BYU Unix Users Group > http://uug.byu.edu/ > > The opinions expressed in this message are the responsibility of their > author. They are not endorsed by BYU, the BYU CS Department or BYU-UUG. > ___________________________________________________________________ > List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list -------------------- BYU Unix Users Group http://uug.byu.edu/ The opinions expressed in this message are the responsibility of their author. They are not endorsed by BYU, the BYU CS Department or BYU-UUG. ___________________________________________________________________ List Info: http://uug.byu.edu/cgi-bin/mailman/listinfo/uug-list
