[TriLUG] Getting, um, probed?

[Mike Johnson]

Timothy E. Jedlicka - wrk [bonzo at lucent.com] wrote:
> So is it worth setting up a tar-pit for these ssh probes? Has anyone setup a 
> tarpit?

Report the IP's to the ISP where the attacks originate and see about 
getting the systems shut down.  That's a far better way of dealing with
it than a tarpit.  Besides, I'm not sure a tarpit would really acomplish
a whole lot in this instance.

Another option is just ignoring them and getting on with your life.

Mike
-- 
"Spare me your space-age technobabble Atilla The Hun!" --  Zapp Brannigan

GNUPG Key fingerprint = ACD2 2F2F C151 FB35 B3AF  C821 89C4 DF9A 5DDD 95D1
GNUPG Key = http://www.enoch.org/mike/mike.pubkey.asc