[tlug] dropping any IP that tries port 22?

["Stephen J. Turnbull" <stephen@example.com>]

scott@example.com writes:

 > I was thinking of running some other service on port 22 that would simply
 > write the IP address of anything that pinged it or whatever to a logfile,
 > then have fail2ban scan that logfile and ban all the IPs within
 > indefinately.

iptables -I INPUT 1 -d yo.ur.i.p --proto tcp --dport 22 --syn -j LOG

(You then need to use position 1 for the bans, otherwise the same
script kiddie gets banned a couple thousand times.)