[psad-discuss] Brute force attacks and statistics

[Franck J. <fra...@dt...>]

Hi,

I am currently running a ftp server on which one I keep an eye to detect
bad ips.

All bots keep trying to connect without SSL whatever the error message
is. After a large amount of tries, I use *psad --fw-block-ip* to ends
the attacks.

The only way I have found to track those offenders, is to keep the email
alerts in my mailbox since *psad -S* does not track them after the timeout.

How do you handle that?

I would like to have statistics.

Regards,

-- 
Franck Joncourt
http://debian.org - http://smhteam.info/wiki/