On 10 Aug 2010, at 22:33, John R Pierce <pierce at hogranch.com> wrote: > If nothing is listening on that port, then whats to 'ban' ? I experimented with something similar - wrote a small C program that listened on port 22, dumped the source IP to a log which was then picked up by fail2ban. Worked quite well if remember correctly! Ben