From ef8a9cfbe5dc8723d9098c8a14b8007095b72f63 Mon Sep 17 00:00:00 2001 From: Kaz Kylheku Date: Sat, 29 Sep 2018 19:45:05 -0700 Subject: ssh: give a point to all intrusion events. --- ssh.txr | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/ssh.txr b/ssh.txr index a1817d1..632e858 100644 --- a/ssh.txr +++ b/ssh.txr @@ -15,7 +15,7 @@ @nil @nil @nil @nil localhost sshd[@nil]: Failed password for @user from @ip port @(skip) @ (do (let ((users (get-info ip)) - (level 0)) + (level 1)) (if (> (length users) 3) (set level 9)) (report ip time level user))) -- cgit v1.2.3