I know this is a little off topic, yet I wrote this a while back because of script kiddies messing with ssh on my server at the time. https://docs.google.com/document/d/1voXlQpos4uI0qhndcIunBew1mmQbwTPl07xG5JF8bNM/edit?usp=drive_web It checks your auth.log for people trying to get in that don't belong and sends an email to the isp hosting their ip address. Every little bit helps to keep the net safe. Take care.