1. I see this at the end of LogWatch email report. What does it mean?
Protocol major versions differ for 195.29.129.69: SSH-2.0-OpenSSH_3.5p1 vs. SSH-1.5-Java Ssh 1.1 (16/09/99) leo@mud.de, original by Cedric Gourio (javassh@france-mail.com)
2. I know I can ban access from an IP under cPanel for an account. But how do I ban an IP for accessing my server (all accounts)?

3. My server load was once very high and "top" showed that it was due to some "Perl" activities. How do I know which scripts are putting on the load? I can't see anything in access log.