ssh: give a point to all intrusion events.

1 files changed, 1 insertions, 1 deletions

diff --git a/ssh.txr b/ssh.txr
index a1817d1..632e858 100644
--- a/ssh.txr
+++ b/ssh.txr
@@ -15,7 +15,7 @@
 @nil @nil @nil @nil localhost sshd[@nil]: Failed password for @user from @ip port @(skip)
 @      (do
          (let ((users (get-info ip))
-               (level 0))
+               (level 1))
            (if (> (length users) 3)
              (set level 9))
            (report ip time level user)))