Trouble with dynamic IP

[WhiteRider]

Hello, I am having some trouble with a guy that has a dynamic IP address. I noticed he is trying to brute-force my SSH account so I used IPtables to drop all incoming packets. The exact command was

iptables -I INPUT -s 84.74.xxx.xxx -j DROP

where x is the rest of his IP. This automatically blocked him. No more activity came from his IP, which is exactly what I want. However 5 minutes later he came back this time with a slightly different IP (the last three numbers had changed).

SO my question is: does anyone know the most effective way to block dynamic IPs from messing around with your computer services?

Thanks

[Motoma]

Hello, I am having some trouble with a guy that has a dynamic IP address. I noticed he is trying to brute-force my SSH account so I used IPtables to drop all incoming packets. The exact command was

iptables -I INPUT -s 84.74.xxx.xxx -j DROP

where x is the rest of his IP. This automatically blocked him. No more activity came from his IP, which is exactly what I want. However 5 minutes later he came back this time with a slightly different IP (the last three numbers had changed).

SO my question is: does anyone know the most effective way to block dynamic IPs from messing around with your computer services?

Thanks

Take a look at the sourceforge page for DenyHosts, which is exactly what you are looking for.

[WhiteRider]

Take a look at the sourceforge page for DenyHosts, which is exactly what you are looking for.

Thanks, thats helped a lot. I've also found out about a script called sshdfilter. Very useful against SSH dictionary attacks and such too.