What does a responsible admin do if ...
Asheesh Laroia
asheesh at asheesh.org
Mon May 14 07:03:20 PDT 2007
On Mon, 14 May 2007, David Wolfskill wrote:
> ... undesirable behavior is seen from a netblock for which there is no
> email contact information?
In my opinion, you do the same thing you would normally do: Use a system
like fail2ban <http://www.fail2ban.org> to automatically block IPs that
repeatedly fail to authenticate. When the attempts stop for a short
while, the ban will lift, but repeated attempts again will restart the
ban.
After all, if they're failing to authenticate, what's the problem? (-;
You could try Googling the RIPE WHOIS info results; the domain seems to be
mut.ac.ir which has an email address listed, at least.
-- Asheesh.
--
Nobody knows the trouble I've been.
More information about the Baylisa
mailing list