Re: [Sshguard-users] Pre-scanning disconnects

[Mij <mi...@ss...>]

On Oct 3, 2011, at 18:18 , Jin Choi wrote:

> I'm seeing recent attacks where there are a number of disconnects before the scan takes place, of the form:
> Received disconnect from x.x.x.x: 11: Bye Bye
> 
> I don't know what hole this is targeting, but can sshguard be modified to handle this behavior as well?

I suggest you file a pattern with danger "noise" or "whinge" on
http://www.sshguard.net/support/attacks/submit/ .
It's hard to tell these apart as attacks, but a suitable danger level
can deliver.