Hello script kiddies

[lovingboth]

Not you :) but various attackers are having a go at the box that hosts my domains. They're attempting to log in via ssh as various users, most of whom don't exist.

Rather than just hope that they don't find a) a valid user and b) a valid password, I've got around to installing DenyHosts which notices such things and sticks their IP addresses into a 'don't even bother' file for the box to ignore future requests from.

One feature is that you can share this info with other users, and get a list of their attackers too... which I haven't enabled yet.

Anyone else running this? Do you enable synchronization mode?

Comments

[topbit.livejournal.com]

I've not myself. I might pull down an update sometime and see how it matches up with attempts against my system sometime though, to see just how effective it would be. OTOH, there are _a lot_ of compromised systems out there to attack from.