This script allows you to automatically ban IPs from which your SSH server receives incorrect login requests (typically brute-force attempts). The IPs are kept in a file for further reference and each time a new IP is identified the script will try to notify the ISP by sending an automated email (if sendmail or any of its replacements that provide a similar interface are available - e.g. Postfix). 1. Dependencies Dependencies for sending emails: any MTA which provides a sendmail interface. 2. Configuration For a list of configuration parameters check the script's content. To make the script run automatically, use a cron job similar to the following:	# this will run the script every 5 minutes	*/5 * * * * ~/bin/SSHBruteForceLogger.sh If you would also like to have a log with the script's output, modify the cron job like this:	*/5 * * * * ~/bin/SSHBruteForceLogger.sh >> ~/bin/SSH-scanner.log SSH-scanner.log should be a different file than the one specified inside the script, in the $logfile parameter (that would be the log file where the sshd daemon writes its entries) or in the $iplist one (that file is the file where all the attacker's IPs are kept for future reference). 3. Tips and tricks If you would like to permanently ban the gathered IP addresses from which the script has discovered illegal login attempts, then at every boot you would have to run a script that DROPs all traffic from each IP in the list using iptables.