Hall of Shame what do you think?

ccgr · 08-10-2006, 03:09 PM

I got notified by my server that someone was trying to brute force their way in. I blocked their IP address in my iptables their packets will be dropped on my server. To let others know that we're not messing around when it comes to security I made a hall of shame page what do you think?

http://www.ccgr.net/hacks.htm

JuggoPop · 08-10-2006, 03:13 PM

cool.

too bad they can't see it.

ccgr · 08-10-2006, 03:15 PM

well I'm assuming they are masking their ip address ro using a proxy of some sort..but either way I think it may deter some and give our clients a peace of mind...I just hope it doesn't seem childish or lame

JuggoPop · 08-10-2006, 03:16 PM

I don't think it's lame.

BinkyMelnik · 08-10-2006, 07:28 PM

ccgr:

Quote:

I think it may deter some and give our clients a peace of mind

I don't see how; it's be more effective if if had someone's name ("Fred Crumblebatch") 'cause then folks'd know he's a stinky turblossom, but it's just a buncha useless numbers, especially since it prolly *is* a proxy. Moreover, it might serve as an invitation to those maladjusted types who see it as some kinda invitation to try to get onto the page themselves. You might be asking for trouble rather than averting it.

**ToddW** · 08-10-2006, 09:19 PM

I think it's a noobish page and thing to show/share with the world.

In reality if you've only blocked 1 attempt I'd be worried.. my "hack"/"block" logs are PAGES full daily....

Remove it, and don't mention it is what I'd say.

vaserv · 08-11-2006, 01:07 AM

Have a look at http://www.dshield.org/ which can automatically block out IP's which have been exploited / try to break in

alemcherry · 08-13-2006, 04:08 AM

Yup, I too would suggest removing it. It looks ameaturish and an invitation to attempt something. Even I feel tempted to see if I can get my IP listed there

JuggoPop · 08-14-2006, 08:23 AM

I still say leave it...

**watley** · 08-14-2006, 12:53 PM

I appreciate the sentiment behind this page but have learned not to underestimate the malice and/or quantities of free time available to some people on the internet. This is kind of like throwing the gauntlet down.

Really, these guys aren't worth your time - the page may be simple, but you still had to set it up, no? You could have used those 90 seconds to drink a beer. Better investment of your time IMHO.

helloworld · 08-14-2006, 10:09 PM

I think it's a waste of time actually, unless they are ignorant it's highly unlikely that they are using their real IP.

I imagine that page would do nothing but give them a big head, and make them feel like quite the illusionist / computer savvy individual that they are NOT.