Simple Intrusion Detection System which monitors SSH login attempts and if hack attempt is detected, system is added to the firewall, and system administrators are notified for both localhost and admins of the specific system attempting the hack attempt.