What does a responsible admin do if ...

Asheesh Laroia asheesh at asheesh.org
Mon May 14 07:03:20 PDT 2007


On Mon, 14 May 2007, David Wolfskill wrote:

> ... undesirable behavior is seen from a netblock for which there is no
> email contact information?

In my opinion, you do the same thing you would normally do: Use a system 
like fail2ban <http://www.fail2ban.org> to automatically block IPs that 
repeatedly fail to authenticate.  When the attempts stop for a short 
while, the ban will lift, but repeated attempts again will restart the 
ban.

After all, if they're failing to authenticate, what's the problem? (-;

You could try Googling the RIPE WHOIS info results; the domain seems to be 
mut.ac.ir which has an email address listed, at least.

-- Asheesh.

-- 
Nobody knows the trouble I've been.



More information about the Baylisa mailing list