Comment by simme_

Neat. I wonder how many "attackers" that scan ssh etc. could be identified by this.