4 ms·

WP and SSH seem to be the most common bot attacks. SSH is easily mitigated by changing the default port from 22 to something else, and adding in fail2ban. As

• jrapdx3 4y ago
  Yup, changed SSH port from 22 to another, the attempts to barge in continue but don't succeed. The motivation for trying to intrude escapes me. I mean if a site is well-known it would make more sense. An obscure and obviously personal site, hard to fathom what breaking in would accomplish, unless some really bored or antisocial people out there consider it a sport of some weird kind. My site is currently >100 pages, so it's modest in scale. Like many sites it consists mainly of static pages but there are dynamic features too, such as basic user comments and messaging. The generator program outputs the html, css and js needed. Written primarily in object-oriented Tcl, pages are generated from source files expressed in a generator-specific DSL. In practice it's way simpler and less exotic than this description suggests. To me "proof of the pudding" is that I can easily pick up where I left off even after being away from the project for a few months. A goal for the generator is to finish packaging and documentation, then releasing as open-source. Not that there aren't already a million ways to create websites, but I figure one more can't hurt! ;-)