Off topic: Hacker

[Tim Holmes]

> On Mon, 2005-08-15 at 11:11, Rick Lim wrote:
> > Hi there,
> >
> > I know this is not the correct forum to ask this question, but I
have to
> > start somewhere.......
> >
> > I have a friend with a linux firewall box.
> > There appears to be a very simple minded hacker trying to do simple
ssh
> > password attacks on this box.
> >
> > I have been using whois and reporting this to each ISP he/she is
coming
> from
> > but he/she just breaks into a different machine on an new ISP and
tries
> > again.
> >
> > Is there something more I can do to track this person down?
> > Thanks.
> >
[Tim Holmes] 
How did you detect this / track this,  I have ssh open to the net for
remote access, and I would like to learn how to detect / defend this
kind of thing

TIM