Layered Security

Anyone with a basic knowledge of security knows not to rely on a single layer of protection. Handy as DenyHosts is, it won't protect you completely. For ssh on my internet exposed linux server I:

1)run on a non-standard port

2)run DenyHosts, with blacklist sharing

3)run PortSentry on the standard ssh port (and many others)

4)Disable ssh login for all but one user that is completely unprivileged and with a non-standard user name.

That's in addition to security measures that don't relate directly to ssh protection.